Re: SOPHOS Antivirus

From: Leythos (void_at_nowhere.com)
Date: 05/29/04 

Date: Sat, 29 May 2004 14:06:00 GMT

In article <40b8578f$1@news.comindico.com.au>, billycomp@hotmail.com
says...
> Every major virus to hit the net, we get it. Your right though, Sophos
> detect all of these, however fails to deal with the virus accordingly.
> Having the file deteled, moved, shredded, copied and etc is not really a
> fantastic option. My question is, how do these files become infected in the
> first place if Sophos was doing it's job.

You need to look at two things right away:

Firewall - use a firewall that allows for SMTP attachment filtering.
This one feature can eliminate 99% of the virus infected inbound email
to your system. This only works if you have your own email server(s),
but I'm assuming that you do.

Anti-Virus - get Norton AV corporate edition and use it. Setup the
updates for every 4 hours on the server and have the server push the
updates to the desktops. We have Symantec AV Corporate edition setup to
FORCE updates and scan's of users computers. You can even install (push)
the AV software to every desktop using the remote installer (right from
the server).

Using these two methods we've eliminated ALL (100%) of inbound virus
attachments from all the companies we manage.

After you do the above, you need to look at HTTP filtering, filtering
what sites users are permitted to access, and blocking ALL outbound
access that is not strictly for business needs. You can even block IM
and those sharing apps that people like to run from their computers to
connect to home. 

-- 
--
spamfree999@rrohio.com
(Remove 999 to reply to me)

Relevant Pages

  • Re: SOPHOS Antivirus
    ... > This one feature can eliminate 99% of the virus infected inbound email ... By definition a firewall has no mail filtering function. ... > updates for every 4 hours on the server and have the server push the ... > updates to the desktops. ...
    (alt.computer.security)
  • SBS2003 Anti Virus
    ... Yes - Use the AVD (Active Virus Defence) from Network ... Does hourly updates, has scanners for SMTP, Exchange, ... Server and will start at a 5 cal count for ...
    (microsoft.public.windows.server.sbs)
  • Re: SOPHOS Antivirus
    ... We use Sophos anti-virus on servers and clients. ... > through automatically from a share which is updated as soon as any updates ... however fails to deal with the virus accordingly. ... > because we have it set to delete viruses. ...
    (alt.computer.security)
  • Re: Virus Scanning Software for FreeBSD
    ... I have been using Amavis and Sophos together for a while now. ... > Updates are monthly CDs and urgent updates are available as downloads. ... new virus that "we have been scanning for this virus since 9:30AM yesterday." ... Were they truly clever ...
    (FreeBSD-Security)
  • Re: SOPHOS Antivirus
    ... I work for a reseller of Sophos antivirus. ... The virus signatures only update once a ... >> By definition a firewall has no mail filtering function. ... NAV Corporate and SBE provide all that you state SOPHOS ...
    (alt.computer.security)
Quantcast