RE: AV that supports spy/adware

No one can comment on how secure the adware/spyware protection that will
be offered by the big AV vendors will become.  I think it will become on
par with the current products out there, in time.  It could take a year
or more, but I think it will happen.  With that in mind, why would you
turn down the extra ease of management feature?  

Yes, layered protection is best, multiple vendors helps give you that,
but if I can simple on the desktop end, and use someone else at a
gateway level, that's the way I'm going to go.

Perhaps my view is skewed as I have over 1200 computers and server to
maintain, and I add on about 20 desktops/laptops a month on average.  If
I only had a few hundred, having to maintain many different products on
the desktops wouldn't be as much of a concern.



-----Original Message-----
From: Steven Hay [mailto:[email protected]] 
Sent: Thursday, May 05, 2005 6:35 PM
To: [email protected]
Subject: RE: AV that supports spy/adware

We take the opposite view, looking at separation of Adware and AV; also
filtering both with layered security.  Our logic is not looking at
simplicity of management, but maximizing security protection.  For the
most part the maintenance is low on our filters once they have been set
up, but licensing is admittedly more work.

We have adware and AV filtering through our gateway, and on the desktop
NAV and have plans to use GreenBorder (although this is still in the
proposal stage).  We're hoping that this approach keeps us reasonably
secure against adware (and it's ilk) as well as viruses.  We like the
Greenborder concept because it runs light and doesn't appear to suffer
from zero day or patch weaknesses.

-----Original Message-----
From: Evan Mann [mailto:[email protected]]
Sent: May 5, 2005 1:30 PM
To: [email protected]
Subject: RE: AV that supports spy/adware


Simplicity of management.  Why managed from 2 separate consoles,
maintain
two different license agreements, etc., when you could do it all from 1
single point.  Less software to install on a client, less resources
used.
Lots of reasons to go down that route.

Sure Spysweeper Enterprise and Sunbelt's CounterSpy Enterprise are the
two
best products out there now, and probably will be for at least anotehr
year,
but all the major AV vendors will catch up to them and offer equivalent
features, and it will make the choice easy for most large companies.


-----Original Message-----
From: Douglas Schlachta (Sr. Infrastructure Security Analyst)
[mailto:[email protected]] 
Sent: Thursday, May 05, 2005 2:19 PM
To: Dave; [email protected]
Subject: RE: AV that supports spy/adware

Why would you even want to go down that road.

There is an excellent product on the market by WebRoot that is
enterprise
manageable.

They appear to also be one of the main leaders in this area.
I would give them a check just to see. IMHO


Regards
Douglas Schlachta
SSCP, MCSE;Security, MCSE, CCNA, CFOT
Senior Infrastructure Security Analyst
Retirement Residences Operations



> -----Original Message-----
> From: Dave [mailto:[email protected]]
> Sent: May 5, 2005 1:00 PM
> To: [email protected]
> Subject: AV that supoprts spy/adware
> 
> Anyone have a list of AV that detects spyware? We are currently using
> eTrust with spybot and the MS beta antispyware. I'd like to get 
> something that's integrated. Thanks.

Please note that Internet email is not always private, secure or
reliable.
The sender accepts no liability for any damages caused by any virus
inadvertently transmitted with this email.  Any opinion expressed in
this
email is solely that of the author, unless clearly indicated otherwise.
This email, and any attachments, may contain confidential and/or
proprietary
information that is intended only for use by the addressee.  If you are
not
the intended recipient, any use, dissemination, forwarding, printing, or
copying of this email is strictly prohibited.  If you received this
email in
error, please delete the email and advise the sender of the delivery
error.