Windows Thread, Anti-Virus Software - guilty or not guilty? in Technical; I am guilty.
Guilty of sometimes forgetting that; Sophos is installed on a server, it's pushing updates out to clients, ...
20th June 2012, 11:02 AM #1
Anti-Virus Software - guilty or not guilty?
I am guilty.
Guilty of sometimes forgetting that; Sophos is installed on a server, it's pushing updates out to clients, the clients are blocking threats and I should check the console more often....
What I struggle with though is Sophos blocks a threat, say an autorun.inf file from a USB stick and by the time I do check the console they have logged off and the threat is no longer cleanable and the machine stays in the logs as having an alert. How do others cope with this?
20th June 2012, 11:06 AM #2
if its something on a pen drive then i just chalk it up as one of those things short of searching everyone in school for pen drives and scanning them all there is as far a i can see not a lot you can do (unless its on a staff laptop so you can make an educated guess who it is)
20th June 2012, 11:13 AM #3
Most of our cleanable threats are in the temporary Internet files folder which group policy deletes when users log off, hence Sophos reports the threat as unclean-able. I just click the erros link highlight them all select "resolve errors and alearts" and click acknowledge. Not to much trouble I check every day so they dont build up. Just get used to a routine of once a day checking whats going on with your Enterprise console as you need to ensure that your console is being updated by your root update server on a regular basis.
20th June 2012, 11:30 AM #4
Let me just preface this with the following disclaimer:
Originally Posted by kennysarmy
I haven't looked at Sophos is a long time, so I may be wrong on this.
Wouldn't it be possible to set Sophos to disable USB drives until they're scanned, scan on insert and auto-fix problems*?
*If unfixable, disable USB and issue a message saying "Your USB drive has been disabled. Contact I.T to discuss your options."
20th June 2012, 11:36 AM #5
I asked Sophos something similar a while ago, appaently it's not feasible due to the size of flash drives and portable hard disks these days
Originally Posted by X-13
20th June 2012, 11:48 AM #6
Originally Posted by joe90bass
That would entirely depend on how much of the space is actually being used.
A 2TB external HDD with a single 1kb .txt file on it will take all of a second to scan.
Likewise, a 4gb USB filled to capacity with various images, documents, .MP3 files and videos will take longer.
By Grommit in forum Windows
Last Post: 7th March 2011, 11:29 PM
By everton4europe in forum Windows
Last Post: 29th January 2008, 03:23 PM
By TSCNUK in forum Windows
Last Post: 17th November 2006, 11:18 AM
By tickmike in forum Windows
Last Post: 14th August 2006, 09:38 PM
By Mango_RW in forum Windows
Last Post: 22nd June 2005, 12:11 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)