RE: Should webservers, eg. IIS 6 have anti--virus installed on th em?
From: Harlan Carvey (keydet89_at_yahoo.com)
Date: 07/20/05
- Previous message: Depp, Dennis M.: "IIS6 and Domain Membership (was RE: Should webservers, eg. IIS 6 have anti--virus installed on them?)"
- In reply to: Steven Hay: "RE: Should webservers, eg. IIS 6 have anti--virus installed on th em?"
- Next in thread: S_Dorn/CIB_at_BANKCIB.COM: "RE: Should webservers, eg. IIS 6 have anti--virus installed on them?"
- Reply: S_Dorn/CIB_at_BANKCIB.COM: "RE: Should webservers, eg. IIS 6 have anti--virus installed on them?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 19 Jul 2005 16:49:09 -0700 (PDT) To: Steven Hay <shay@communitysavings.ca>, focus-ms@securityfocus.com
> I have a completely different view. I think that
> AV, while not the silver
> bullet, is a solid line of defence.
Perhaps, but from what? It won't protect the box from
being broken into, and the argument that it will
protect you from things we don't know about yet just
doesn't hold.
> The more
> lines of defence you have, the more proactively you
> have secured your environment.
And the more things you have to manage, and the more
things you have to look at when troubleshooting an
issue...and yet another set of logs that you have to
review.
> In a perfect world everything would be nicely
> secured, things like Windows
> and TCP/IP would have been designed for security and
> we would all be proactive not reactive.
But you can be proactive with Windows...there are a
great number of things you can do to secure a Windows
system proactively. The problem is that few of them
are done.
Harlan
------------------------------------------
Harlan Carvey, CISSP
"Windows Forensics and Incident Recovery"
http://www.windows-ir.com
http://windowsir.blogspot.com
------------------------------------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
- Previous message: Depp, Dennis M.: "IIS6 and Domain Membership (was RE: Should webservers, eg. IIS 6 have anti--virus installed on them?)"
- In reply to: Steven Hay: "RE: Should webservers, eg. IIS 6 have anti--virus installed on th em?"
- Next in thread: S_Dorn/CIB_at_BANKCIB.COM: "RE: Should webservers, eg. IIS 6 have anti--virus installed on them?"
- Reply: S_Dorn/CIB_at_BANKCIB.COM: "RE: Should webservers, eg. IIS 6 have anti--virus installed on them?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|