RE: a 2nd antivirus
We've got Trendmicro on an e-mail gateway, Norton Enterprise for the Exchange server and desktops. Works well. Regards, Orin Rehorst Port of Houston Authority (Largest U.S. port in foreign tonnage) e-mail: [EMAIL PROTECTED] Phone: (713)670-2443 Fax: (713)670-2457 TOPAS web site: www.homestead.com/topas/topas.html -Original Message- From: Hansen, Eric [mailto:[EMAIL PROTECTED]] Sent: Friday, November 16, 2001 2:39 PM To: Exchange Discussions Subject:RE: a 2nd antivirus We currently do that but they are all the same brand, and who is to say what brand of AV cant find any given virus first. Personally I think our current setup is good, we could use more firewall scanning perhaps. I was told to explore the options so Thanks for the feedback everyone. -Original Message- From: Andrew Chan [mailto:[EMAIL PROTECTED]] Sent: Friday, November 16, 2001 10:36 AM To: Exchange Discussions Subject: RE: a 2nd antivirus I wouldn't want to put two different AV all on the Exchange server. I'd prefer the setup where you use one AV at the SMTP gateway, and another one on Exchange box. If you are really paranoid, you can put a third AV for your desktops... Andrew, MCSE (NT W2K) + CCNA -Original Message- From: Andy David [mailto:[EMAIL PROTECTED]] Posted At: Friday, November 16, 2001 9:34 AM Posted To: NewsgroupDiscussion Conversation: a 2nd antivirus Subject: RE: a 2nd antivirus I use two separate products. Antigen (with the Norman Engine) on the mail server and Symantec on the desktops/servers. Additionally Antigen will allow you to use multiple engines. I like the idea of separate products myself. -Original Message- From: Hansen, Eric [mailto:[EMAIL PROTECTED]] Sent: Friday, November 16, 2001 12:37 PM To: Exchange Discussions Subject: a 2nd antivirus This is part of a bigger question, and I'm not sure if I agree with the means behind it but I'll ask anyway. Recently my IT manager and some of the other guys on the team have taken a deeper interest in AV, almost to the point of hiring a guy that does AV and only AV. They are also talking about having a 2nd AV in the building, say both Symantec(we currently use) and Mcafee or whatever. They seem to think between having 2 products would greater increase the ability to detect virus threats, whereas I feel that by the time one of these systems detects it it most likely has already infiltrated and done the damage. They then asked me about running 2 AV's on the Exchange server. With all the blocking I do I would think a 2nd product would not help much, not to mention the overhead and incompatibility issues a 2nd AV would cause on the Exchange server. I recommended they look at a IDS system or something for the firewall. Thoughts? e- _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: a 2nd antivirus
Antigen allows for up to 4 different AV engines to scan everythingCA, Sophos, and I think Mcafee and Symantec... Bill Lambert Endoxy Healthcare 847-941-9206 [EMAIL PROTECTED] -Original Message- From: Hansen, Eric [mailto:[EMAIL PROTECTED]] Sent: Friday, November 16, 2001 11:37 AM To: Exchange Discussions Subject: a 2nd antivirus This is part of a bigger question, and I'm not sure if I agree with the means behind it but I'll ask anyway. Recently my IT manager and some of the other guys on the team have taken a deeper interest in AV, almost to the point of hiring a guy that does AV and only AV. They are also talking about having a 2nd AV in the building, say both Symantec(we currently use) and Mcafee or whatever. They seem to think between having 2 products would greater increase the ability to detect virus threats, whereas I feel that by the time one of these systems detects it it most likely has already infiltrated and done the damage. They then asked me about running 2 AV's on the Exchange server. With all the blocking I do I would think a 2nd product would not help much, not to mention the overhead and incompatibility issues a 2nd AV would cause on the Exchange server. I recommended they look at a IDS system or something for the firewall. Thoughts? e- _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: a 2nd antivirus
I don't think you would want (nor would it work to have) two AV products on the Exchange servers. The approach we use is to have a mail relay running Trend's InterScan VirusWall scanning everything between the Internet and Exchange. Works like a dream... -- Roger D. Seielstad - MCSE MCT Senior Systems Administrator Peregrine Systems Atlanta, GA http://www.peregrine.com -Original Message- From: Hansen, Eric [mailto:[EMAIL PROTECTED]] Sent: Friday, November 16, 2001 12:37 PM To: Exchange Discussions Subject: a 2nd antivirus This is part of a bigger question, and I'm not sure if I agree with the means behind it but I'll ask anyway. Recently my IT manager and some of the other guys on the team have taken a deeper interest in AV, almost to the point of hiring a guy that does AV and only AV. They are also talking about having a 2nd AV in the building, say both Symantec(we currently use) and Mcafee or whatever. They seem to think between having 2 products would greater increase the ability to detect virus threats, whereas I feel that by the time one of these systems detects it it most likely has already infiltrated and done the damage. They then asked me about running 2 AV's on the Exchange server. With all the blocking I do I would think a 2nd product would not help much, not to mention the overhead and incompatibility issues a 2nd AV would cause on the Exchange server. I recommended they look at a IDS system or something for the firewall. Thoughts? e- _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: a 2nd antivirus
I wouldn't want to put two different AV all on the Exchange server. I'd prefer the setup where you use one AV at the SMTP gateway, and another one on Exchange box. If you are really paranoid, you can put a third AV for your desktops... Andrew, MCSE (NT W2K) + CCNA -Original Message- From: Andy David [mailto:[EMAIL PROTECTED]] Posted At: Friday, November 16, 2001 9:34 AM Posted To: NewsgroupDiscussion Conversation: a 2nd antivirus Subject: RE: a 2nd antivirus I use two separate products. Antigen (with the Norman Engine) on the mail server and Symantec on the desktops/servers. Additionally Antigen will allow you to use multiple engines. I like the idea of separate products myself. -Original Message- From: Hansen, Eric [mailto:[EMAIL PROTECTED]] Sent: Friday, November 16, 2001 12:37 PM To: Exchange Discussions Subject: a 2nd antivirus This is part of a bigger question, and I'm not sure if I agree with the means behind it but I'll ask anyway. Recently my IT manager and some of the other guys on the team have taken a deeper interest in AV, almost to the point of hiring a guy that does AV and only AV. They are also talking about having a 2nd AV in the building, say both Symantec(we currently use) and Mcafee or whatever. They seem to think between having 2 products would greater increase the ability to detect virus threats, whereas I feel that by the time one of these systems detects it it most likely has already infiltrated and done the damage. They then asked me about running 2 AV's on the Exchange server. With all the blocking I do I would think a 2nd product would not help much, not to mention the overhead and incompatibility issues a 2nd AV would cause on the Exchange server. I recommended they look at a IDS system or something for the firewall. Thoughts? e- _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: a 2nd antivirus
I was referring to two separate products in-house, not on the Exch Server. -Original Message- From: Andrew Chan [mailto:[EMAIL PROTECTED]] Sent: Friday, November 16, 2001 1:36 PM To: Exchange Discussions Subject: RE: a 2nd antivirus I wouldn't want to put two different AV all on the Exchange server. I'd prefer the setup where you use one AV at the SMTP gateway, and another one on Exchange box. If you are really paranoid, you can put a third AV for your desktops... Andrew, MCSE (NT W2K) + CCNA -Original Message- From: Andy David [mailto:[EMAIL PROTECTED]] Posted At: Friday, November 16, 2001 9:34 AM Posted To: NewsgroupDiscussion Conversation: a 2nd antivirus Subject: RE: a 2nd antivirus I use two separate products. Antigen (with the Norman Engine) on the mail server and Symantec on the desktops/servers. Additionally Antigen will allow you to use multiple engines. I like the idea of separate products myself. -Original Message- From: Hansen, Eric [mailto:[EMAIL PROTECTED]] Sent: Friday, November 16, 2001 12:37 PM To: Exchange Discussions Subject: a 2nd antivirus This is part of a bigger question, and I'm not sure if I agree with the means behind it but I'll ask anyway. Recently my IT manager and some of the other guys on the team have taken a deeper interest in AV, almost to the point of hiring a guy that does AV and only AV. They are also talking about having a 2nd AV in the building, say both Symantec(we currently use) and Mcafee or whatever. They seem to think between having 2 products would greater increase the ability to detect virus threats, whereas I feel that by the time one of these systems detects it it most likely has already infiltrated and done the damage. They then asked me about running 2 AV's on the Exchange server. With all the blocking I do I would think a 2nd product would not help much, not to mention the overhead and incompatibility issues a 2nd AV would cause on the Exchange server. I recommended they look at a IDS system or something for the firewall. Thoughts? e- _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: a 2nd antivirus
Two AV is good One for servers, one at desk This haiku not good. Having two will increase your chances of detection -- I like having one at the server side and different product at the desktop. Anything that slips past the server product will hopefully be caught by the desktop one. I wouldn't install two AV products on a single Exchange server, though. You might look into running multiple engines with Antigen or something as others have suggested. Security is a process, not a product. -Ben- Ben M. Schorr, MVP-Outlook, CNA, MCPx3 Director of Information Services Damon Key Leong Kupchak Hastert http://www.hawaiilawyer.com -Original Message- From: Hansen, Eric [mailto:[EMAIL PROTECTED]] Sent: Friday, November 16, 2001 7:37 AM To: Exchange Discussions Subject: a 2nd antivirus This is part of a bigger question, and I'm not sure if I agree with the means behind it but I'll ask anyway. Recently my IT manager and some of the other guys on the team have taken a deeper interest in AV, almost to the point of hiring a guy that does AV and only AV. They are also talking about having a 2nd AV in the building, say both Symantec(we currently use) and Mcafee or whatever. They seem to think between having 2 products would greater increase the ability to detect virus threats, whereas I feel that by the time one of these systems detects it it most likely has already infiltrated and done the damage. They then asked me about running 2 AV's on the Exchange server. With all the blocking I do I would think a 2nd product would not help much, not to mention the overhead and incompatibility issues a 2nd AV would cause on the Exchange server. I recommended they look at a IDS system or something for the firewall. Thoughts? e- _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: a 2nd antivirus
I agree. In your case, an IDS would be the most effective plan. Denis -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Hansen, Eric Sent: Friday, November 16, 2001 12:37 PM To: Exchange Discussions Subject: a 2nd antivirus This is part of a bigger question, and I'm not sure if I agree with the means behind it but I'll ask anyway. Recently my IT manager and some of the other guys on the team have taken a deeper interest in AV, almost to the point of hiring a guy that does AV and only AV. They are also talking about having a 2nd AV in the building, say both Symantec(we currently use) and Mcafee or whatever. They seem to think between having 2 products would greater increase the ability to detect virus threats, whereas I feel that by the time one of these systems detects it it most likely has already infiltrated and done the damage. They then asked me about running 2 AV's on the Exchange server. With all the blocking I do I would think a 2nd product would not help much, not to mention the overhead and incompatibility issues a 2nd AV would cause on the Exchange server. I recommended they look at a IDS system or something for the firewall. Thoughts? e- _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: a 2nd antivirus
We currently do that but they are all the same brand, and who is to say what brand of AV cant find any given virus first. Personally I think our current setup is good, we could use more firewall scanning perhaps. I was told to explore the options so Thanks for the feedback everyone. -Original Message- From: Andrew Chan [mailto:[EMAIL PROTECTED]] Sent: Friday, November 16, 2001 10:36 AM To: Exchange Discussions Subject: RE: a 2nd antivirus I wouldn't want to put two different AV all on the Exchange server. I'd prefer the setup where you use one AV at the SMTP gateway, and another one on Exchange box. If you are really paranoid, you can put a third AV for your desktops... Andrew, MCSE (NT W2K) + CCNA -Original Message- From: Andy David [mailto:[EMAIL PROTECTED]] Posted At: Friday, November 16, 2001 9:34 AM Posted To: NewsgroupDiscussion Conversation: a 2nd antivirus Subject: RE: a 2nd antivirus I use two separate products. Antigen (with the Norman Engine) on the mail server and Symantec on the desktops/servers. Additionally Antigen will allow you to use multiple engines. I like the idea of separate products myself. -Original Message- From: Hansen, Eric [mailto:[EMAIL PROTECTED]] Sent: Friday, November 16, 2001 12:37 PM To: Exchange Discussions Subject: a 2nd antivirus This is part of a bigger question, and I'm not sure if I agree with the means behind it but I'll ask anyway. Recently my IT manager and some of the other guys on the team have taken a deeper interest in AV, almost to the point of hiring a guy that does AV and only AV. They are also talking about having a 2nd AV in the building, say both Symantec(we currently use) and Mcafee or whatever. They seem to think between having 2 products would greater increase the ability to detect virus threats, whereas I feel that by the time one of these systems detects it it most likely has already infiltrated and done the damage. They then asked me about running 2 AV's on the Exchange server. With all the blocking I do I would think a 2nd product would not help much, not to mention the overhead and incompatibility issues a 2nd AV would cause on the Exchange server. I recommended they look at a IDS system or something for the firewall. Thoughts? e- _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
