General discussion

Locked

More than 1 AntiVirus?

By Vida ·
I just read the White Paper touting that everyone should be using multiple antivirus engines simultaneously for complete protection. I was always told to never use more than one at a time because the engines would conflict with each other and wreakhavoc on your system. Have I been misinformed?

This conversation is currently closed to new comments.

7 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

More then 1 Anitvirus

by gibsonhl2001 In reply to More than 1 AntiVirus?

The key is don't run more then one at the same time. What I have found to work best is I have one that runs in real time that I will shut off and run the other antivirus for a full scan on a scheduled basis, Then run the anti-virus that is in monintor mode as a full scan as well.
The reason is that no 2 companies have the same priorty of which virus to fix first. I have found Trend Micro to pick up the most only because it has updates to the definitions almost every other day. I have heard that Norton is now doing that but I have not confirmed it.

Best of Luck

Collapse -

More than 1 AntiVirus?

by george In reply to More than 1 AntiVirus?

One way to use two different antivirus programs is to use one one the workstations and another on the servers. You can use Norton on the workstations and say McAfee on your email server. This way, both server and workstation scan mail and if one misses, the other should catch it.

Collapse -

So Technically - Not

by Vida In reply to More than 1 AntiVirus?

I think it's a little misleading and readers should be warned and informed of the potentially disasterous results of running more than one engine simultaneously as recent articles are suggesting. I've always used Norton at the server and Mcafee at the workstations because of the different priorities and techniques of different engines, but some combinations can actually render all installed engines useless while leaving your system locked up and/or vulnerable.

Collapse -

Current Virus Signatures/Definitions

by Bill Rankin In reply to More than 1 AntiVirus?

Having the most Current Virus Signatures or Definitions is more probably the best approach. I work at a DOD site and we use Symantec's Norton Antivirus Corporate Edition. With a central server we can configure the clients to scan at a specific time,lock the user out of the config section, push signature files and centrally record tons of data about the scans, etc.

All without the user being logged on! The system has to be powered up and online.

We use McAfee on the Exchange servers and Symantec on the gateways. We block certain traffic at the firewall. We block certain attachments. We use NATting and a private IP schema. And more.

Best result - one system/one program/most current definitions. But remember this is only one step inthe anti virus approach. Use a firewall also.

Later - Bill

Collapse -

only one...

by mrjay67 In reply to More than 1 AntiVirus?

These replies are pretty much on the ball. I have seen first hand some nearly disastrous results of people installing mcafee and norton. I've seen techs do it by accident when mcafee didnt appear to be there but just some residual background filesand lock up NT on reboot. We had to go to the server and shutdown the 2 AV services to gain control back and get rid of mcafee. Norton seems to be the most popular in corporate enviroments these days. I have heard of people running more than one...I consider them beyond lucky. One per system is all you need and all that will safely work. Norton and mcafee are the worst about coexistance, others may be better but i dont trust it.

Jason

Collapse -

Different scanners for different jobs

by CurtisInterruptus In reply to More than 1 AntiVirus?

When first starting our network, I read all I could about the best approaches to AV setups. I came to the conclusion that I would use Symantec's Norton Antivirus Corporate Edition on my servers and desktops because of its ease of use and good automatic updates. We use Kaspersky's (DKAV) on all outgoing and incoming email (with daily automated updates). Norton's will also catch anything that comes past KDAV to the desktop OR servers. Plus, we block all outgoing and incoming executable file attachments and several other nasty things from our hardware firewall. In over 21 months now, the only thing that has gotten through was one case of Nimda (in its first days), which Norton stopped in pretty short order in only two desktops. I think the main things to remember are to use well known engines and try to separate them by major functions. Also, make sure you can easily support it all!!!!

Collapse -

Overall Security Issues

by Vida In reply to Different scanners for di ...

I have just had a Linux box with Firestarter firewall setup - now I need to learn Linux - Would I block the exe's and file extensions from within Firestarter? Meanwhile - since I have to take care of these hooligans myself - I distribute my own custom form "Virus Alert&Profile" that I print, fax and post through out the office for Medium/High risk viruses - i.e. when bugbear went "high" today. This keeps them on their toes for a few days, and they're actually quite educated now.

Back to IT Employment Forum
7 total posts (Page 1 of 1)  

General Discussion Forums