+ Post New Thread
Results 1 to 6 of 6
Windows Thread, Anti-Virus Software - guilty or not guilty? in Technical; I am guilty. Guilty of sometimes forgetting that; Sophos is installed on a server, it's pushing updates out to clients, ...
  1. #1
    kennysarmy's Avatar
    Join Date
    Oct 2005
    Location
    UK
    Posts
    1,286
    Thank Post
    80
    Thanked 45 Times in 31 Posts
    Rep Power
    30

    Anti-Virus Software - guilty or not guilty?

    I am guilty.

    Guilty of sometimes forgetting that; Sophos is installed on a server, it's pushing updates out to clients, the clients are blocking threats and I should check the console more often....

    What I struggle with though is Sophos blocks a threat, say an autorun.inf file from a USB stick and by the time I do check the console they have logged off and the threat is no longer cleanable and the machine stays in the logs as having an alert. How do others cope with this?

    Jeff

  2. #2


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    6,578
    Thank Post
    228
    Thanked 853 Times in 732 Posts
    Rep Power
    294
    if its something on a pen drive then i just chalk it up as one of those things short of searching everyone in school for pen drives and scanning them all there is as far a i can see not a lot you can do (unless its on a staff laptop so you can make an educated guess who it is)

  3. #3

    Join Date
    Jun 2010
    Posts
    198
    Thank Post
    9
    Thanked 25 Times in 24 Posts
    Rep Power
    21
    Most of our cleanable threats are in the temporary Internet files folder which group policy deletes when users log off, hence Sophos reports the threat as unclean-able. I just click the erros link highlight them all select "resolve errors and alearts" and click acknowledge. Not to much trouble I check every day so they dont build up. Just get used to a routine of once a day checking whats going on with your Enterprise console as you need to ensure that your console is being updated by your root update server on a regular basis.

    kili

  4. #4

    X-13's Avatar
    Join Date
    Jan 2011
    Location
    /dev/null
    Posts
    9,033
    Thank Post
    591
    Thanked 1,945 Times in 1,345 Posts
    Blog Entries
    19
    Rep Power
    813
    Quote Originally Posted by kennysarmy View Post
    What I struggle with though is Sophos blocks a threat, say an autorun.inf file from a USB stick and by the time I do check the console they have logged off and the threat is no longer cleanable and the machine stays in the logs as having an alert. How do others cope with this?

    Jeff
    Let me just preface this with the following disclaimer:

    I haven't looked at Sophos is a long time, so I may be wrong on this.



    Wouldn't it be possible to set Sophos to disable USB drives until they're scanned, scan on insert and auto-fix problems*?


    *If unfixable, disable USB and issue a message saying "Your USB drive has been disabled. Contact I.T to discuss your options."

  5. #5
    joe90bass's Avatar
    Join Date
    Oct 2007
    Location
    S Wales
    Posts
    1,349
    Thank Post
    322
    Thanked 107 Times in 96 Posts
    Rep Power
    50
    Quote Originally Posted by X-13 View Post
    Let me just preface this with the following disclaimer:

    I haven't looked at Sophos is a long time, so I may be wrong on this.



    Wouldn't it be possible to set Sophos to disable USB drives until they're scanned, scan on insert and auto-fix problems*?


    *If unfixable, disable USB and issue a message saying "Your USB drive has been disabled. Contact I.T to discuss your options."
    I asked Sophos something similar a while ago, appaently it's not feasible due to the size of flash drives and portable hard disks these days

  6. #6

    X-13's Avatar
    Join Date
    Jan 2011
    Location
    /dev/null
    Posts
    9,033
    Thank Post
    591
    Thanked 1,945 Times in 1,345 Posts
    Blog Entries
    19
    Rep Power
    813
    Quote Originally Posted by joe90bass View Post
    I asked Sophos something similar a while ago, appaently it's not feasible due to the size of flash drives and portable hard disks these days

    That would entirely depend on how much of the space is actually being used.

    A 2TB external HDD with a single 1kb .txt file on it will take all of a second to scan.


    Likewise, a 4gb USB filled to capacity with various images, documents, .MP3 files and videos will take longer.

SHARE:
+ Post New Thread

Similar Threads

  1. Which Helpdesk Software.. Free or Not
    By Grommit in forum Windows
    Replies: 47
    Last Post: 7th March 2011, 10:29 PM
  2. Anti Virus software
    By everton4europe in forum Windows
    Replies: 1
    Last Post: 29th January 2008, 02:23 PM
  3. Free? Anti-Virus Software
    By TSCNUK in forum Windows
    Replies: 1
    Last Post: 17th November 2006, 10:18 AM
  4. Replies: 20
    Last Post: 14th August 2006, 08:38 PM
  5. Anti-Virus Software
    By Mango_RW in forum Windows
    Replies: 21
    Last Post: 22nd June 2005, 11:11 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •