From: Leythos on 31 Jan 2010 19:17 In article <#vh0G1qoKHA.4044(a)TK2MSFTNGP06.phx.gbl>, sbradcpa(a)pacbell.net says... > > Leythos wrote: > > In article <u39aMZSoKHA.1548(a)TK2MSFTNGP02.phx.gbl>, sbradcpa(a)pacbell.net > > says... > > > >> Ronald wrote: > >> > >>> Hello > >>> > >>> What antivirus application do you suggest for SBS 2008 R2 - a single server > >>> licsence is needed. > >>> > >>> Thanks! > >>> > >>> > >>> > >> None. > >> > >> Seriously. > >> > >> Protect the workstations, but I'm seriously questioning the value of > >> antivirus on a server due to the risk of false positives and how heavy > >> handed all of them are these days. > >> > > > > I would rather rely on backups and AV than to have no AV protection at > > the server memory and file level. > > > > > A backup does not fix the issue where antivirus vendors are installing > firewalls and causing network traffic to come to a halt, or the issue > where the Exchange aware a/v is shutting down email after a week and > causing issues. > > Symantec is not without it's past issues as well. You seem to be talking about different things - I never install any firewall on the server, not even the Windows firewall, certainly not the AV vendors firewall. I've not had a properly configured corporate AV solution corrupt, cause problems, delete, break, exchange in all the years I've been doing this, but you could complain about SQL and other products if you didn't know how to configure them too. I don't suggest Symantec Corp edition software any more, not after having one of my own sacrificial workstations compromised why fully protected by SEPP 11.0.5 - I'm into Avira for non-DOD/HS solutions. -- You can't trust your best friends, your five senses, only the little voice inside you that most civilians don't even hear -- Listen to that. Trust yourself. spam999free(a)rrohio.com (remove 999 for proper email address)
From: Susan Bradley on 31 Jan 2010 20:09 Leythos wrote: > In article <#BAmn1qoKHA.4044(a)TK2MSFTNGP06.phx.gbl>, sbradcpa(a)pacbell.net > says... > >> If you put the scanning in the cloud in front of the server, exactly >> what is the antivirus on the server doing other than making your life >> miserable at times? >> >> > > Things get in, it happens, and sometimes they are not caught by the > workstation AV product - the server AV product scans everything, > profiles, my-documents, etc... > > And with the exclusions that the products recommend that you have on a DC/Exchange/SQL server, there's a lot of places you aren't scanning. Have you ever seen it catch anything? If the workstation a/v product is not catching stuff...that's the issue you need to attend to first.
From: Susan Bradley on 31 Jan 2010 20:10 Leythos wrote: > In article <#vh0G1qoKHA.4044(a)TK2MSFTNGP06.phx.gbl>, sbradcpa(a)pacbell.net > says... > >> Leythos wrote: >> >>> In article <u39aMZSoKHA.1548(a)TK2MSFTNGP02.phx.gbl>, sbradcpa(a)pacbell.net >>> says... >>> >>> >>>> Ronald wrote: >>>> >>>> >>>>> Hello >>>>> >>>>> What antivirus application do you suggest for SBS 2008 R2 - a single server >>>>> licsence is needed. >>>>> >>>>> Thanks! >>>>> >>>>> >>>>> >>>>> >>>> None. >>>> >>>> Seriously. >>>> >>>> Protect the workstations, but I'm seriously questioning the value of >>>> antivirus on a server due to the risk of false positives and how heavy >>>> handed all of them are these days. >>>> >>>> >>> I would rather rely on backups and AV than to have no AV protection at >>> the server memory and file level. >>> >>> >>> >> A backup does not fix the issue where antivirus vendors are installing >> firewalls and causing network traffic to come to a halt, or the issue >> where the Exchange aware a/v is shutting down email after a week and >> causing issues. >> >> Symantec is not without it's past issues as well. >> > > You seem to be talking about different things - I never install any > firewall on the server, not even the Windows firewall, certainly not the > AV vendors firewall. > > I've not had a properly configured corporate AV solution corrupt, cause > problems, delete, break, exchange in all the years I've been doing this, > but you could complain about SQL and other products if you didn't know > how to configure them too. > > I don't suggest Symantec Corp edition software any more, not after > having one of my own sacrificial workstations compromised why fully > protected by SEPP 11.0.5 - I'm into Avira for non-DOD/HS solutions. > > Some of the antivirus vendors you can't "not" install it. Their code goes on the box whether you like it or not. SBS 2008 the windows firewall stays on the server and I don't turn it off.
From: Cliff Galiher - MVP on 31 Jan 2010 20:59 Indeed. There is little to no reason *not* to run the built in Windows firewall on *any* box, server or workstation. Exceptions are dead easy, resource use is negligible, and as an added layer, it is both effective yet unobtrusive. But then again, I've posted my past experiences where it has saved a network, so perhaps I'm just beating a dead horse... -Cliff "Susan Bradley" <sbradcpa(a)pacbell.net> wrote in message news:OehdhttoKHA.1556(a)TK2MSFTNGP05.phx.gbl... > Leythos wrote: >> In article <#vh0G1qoKHA.4044(a)TK2MSFTNGP06.phx.gbl>, sbradcpa(a)pacbell.net >> says... >> >>> Leythos wrote: >>> >>>> In article <u39aMZSoKHA.1548(a)TK2MSFTNGP02.phx.gbl>, >>>> sbradcpa(a)pacbell.net says... >>>> >>>>> Ronald wrote: >>>>> >>>>>> Hello >>>>>> >>>>>> What antivirus application do you suggest for SBS 2008 R2 - a single >>>>>> server licsence is needed. >>>>>> >>>>>> Thanks! >>>>>> >>>>>> >>>>> None. >>>>> >>>>> Seriously. >>>>> >>>>> Protect the workstations, but I'm seriously questioning the value of >>>>> antivirus on a server due to the risk of false positives and how heavy >>>>> handed all of them are these days. >>>>> >>>> I would rather rely on backups and AV than to have no AV protection at >>>> the server memory and file level. >>>> >>>> >>> A backup does not fix the issue where antivirus vendors are installing >>> firewalls and causing network traffic to come to a halt, or the issue >>> where the Exchange aware a/v is shutting down email after a week and >>> causing issues. >>> >>> Symantec is not without it's past issues as well. >>> >> >> You seem to be talking about different things - I never install any >> firewall on the server, not even the Windows firewall, certainly not the >> AV vendors firewall. >> >> I've not had a properly configured corporate AV solution corrupt, cause >> problems, delete, break, exchange in all the years I've been doing this, >> but you could complain about SQL and other products if you didn't know >> how to configure them too. >> >> I don't suggest Symantec Corp edition software any more, not after having >> one of my own sacrificial workstations compromised why fully protected by >> SEPP 11.0.5 - I'm into Avira for non-DOD/HS solutions. >> >> > Some of the antivirus vendors you can't "not" install it. Their code goes > on the box whether you like it or not. > > SBS 2008 the windows firewall stays on the server and I don't turn it off.
From: Leythos on 1 Feb 2010 09:19
In article <OehdhttoKHA.1556(a)TK2MSFTNGP05.phx.gbl>, sbradcpa(a)pacbell.net says... > > Leythos wrote: > > In article <#vh0G1qoKHA.4044(a)TK2MSFTNGP06.phx.gbl>, sbradcpa(a)pacbell.net > > says... > > > >> Leythos wrote: > >> > >>> In article <u39aMZSoKHA.1548(a)TK2MSFTNGP02.phx.gbl>, sbradcpa(a)pacbell.net > >>> says... > >>> > >>> > >>>> Ronald wrote: > >>>> > >>>> > >>>>> Hello > >>>>> > >>>>> What antivirus application do you suggest for SBS 2008 R2 - a single server > >>>>> licsence is needed. > >>>>> > >>>>> Thanks! > >>>>> > >>>>> > >>>>> > >>>>> > >>>> None. > >>>> > >>>> Seriously. > >>>> > >>>> Protect the workstations, but I'm seriously questioning the value of > >>>> antivirus on a server due to the risk of false positives and how heavy > >>>> handed all of them are these days. > >>>> > >>>> > >>> I would rather rely on backups and AV than to have no AV protection at > >>> the server memory and file level. > >>> > >>> > >>> > >> A backup does not fix the issue where antivirus vendors are installing > >> firewalls and causing network traffic to come to a halt, or the issue > >> where the Exchange aware a/v is shutting down email after a week and > >> causing issues. > >> > >> Symantec is not without it's past issues as well. > >> > > > > You seem to be talking about different things - I never install any > > firewall on the server, not even the Windows firewall, certainly not the > > AV vendors firewall. > > > > I've not had a properly configured corporate AV solution corrupt, cause > > problems, delete, break, exchange in all the years I've been doing this, > > but you could complain about SQL and other products if you didn't know > > how to configure them too. > > > > I don't suggest Symantec Corp edition software any more, not after > > having one of my own sacrificial workstations compromised why fully > > protected by SEPP 11.0.5 - I'm into Avira for non-DOD/HS solutions. > > > > > Some of the antivirus vendors you can't "not" install it. Their code > goes on the box whether you like it or not. > > SBS 2008 the windows firewall stays on the server and I don't turn it off. With Symantec SEPP you can choose to not use it and the PUSH to workstations is completely controlled, so you don't have to install the workstation part either - very simple to use. I don't use the windows firewall on my SBS 2003/2008 boxes, never had a problem in all these many years. -- You can't trust your best friends, your five senses, only the little voice inside you that most civilians don't even hear -- Listen to that. Trust yourself. spam999free(a)rrohio.com (remove 999 for proper email address) |