Gateway antivirus

[SYNACK]

Interesting but of little use to servers which are generally left on, this device only helps if the machine is rebooted and does not take into account a compromise of the RAM which is the more likely host for an active low level virus/rootkit which targets the kernel in memory. The box could still be bluepilled and shunted down a ring on the CPU giving the rootkit full control untill the system is rebooted.

 

The HD is also not the only persistant storage device, you can plant code in DVD drive firmware, probably NIC firmware and the BIOS.

 

I guess that this could be another useful tool against viruses but it still relies on the OS for updates even if via a defended channel. It all depends on the cost and usefuless of the final product in the end though as to how far it goes.

[tom_newton]

Quick cheeky ping of my poll, now it's not half term any more

[Kitkatninja]

We use the Sophos WS1000 which protects against Virus/Malware/Spyware.

 

-ken

[tom_newton]

We use the Sophos WS1000 which protects against Virus/Malware/Spyware.

 

-ken

 

Ken,

Do you find it effective? Do you often check reports etc. or is it a "set and forget" function as far as you are concerned?

 

Tom

[timpaxton]

I use SmoothWall, but as the hardware is a bit dated, don't dare turn on Clam (which I know is a bit of a hog). I'd like to know what SmoothWall are planning for the replacement, and if it's going to slam my hardware!

[Stuart_C]

I've got the AV on my SWG-708 but It's not turned on. Why? Well I suppose I never really thoguht about it. I've got McAfee on all the PC's so it just seemed a bit like putting extra work on the box for very little reward. The "why complicate things" attitude.

[tom_newton]

I use SmoothWall, but as the hardware is a bit dated, don't dare turn on Clam (which I know is a bit of a hog). I'd like to know what SmoothWall are planning for the replacement, and if it's going to slam my hardware!

 

We're planning a low-impact replacement called GFI VIPRE. It is taking slightly longer than expected due to the takeover of Sunbelt by GFI though.