Questions

Windows 7 with Deep Freeze only (no antivirus)?

Tags:
+
0 Votes
Locked

Windows 7 with Deep Freeze only (no antivirus)?

techin
Hi,

I am in a K12 school and I am preparing laptop for students project. The laptops will be standalone (not attach to a domain).

Is using Deep Freeze only is enough to protect the network?

Thanks
  • +
    0 Votes
    Darryl~ Moderator

    they are still connected to the network & there is the potential for security issues because of that. Deep Freeze will only protect the computers it is installed on, they will be able to be returned to their previous stat if a virus etc is encountered but if it makes it into the network, there is the possibility that the domain could become infected.

    It would be best to put the stand alone computers on the outside of the firewall or in the DMZ.

    +
    0 Votes
    OH Smeg

    While Deep Freeze is a good product it will not stop a computer becoming infected with something it will at best return it to the way it was on the restart and kill any infection from the previous session. It will do nothing to stop the Propagation of Infections while the session is running or the spread of infections.

    Then when you consider the way that the writes of these infections are going it may not be possible to return the system to a uninfected state on the restart at some point in the future.

    So overall I would say no Deep Freeze by itself will not be sufficient. But if you have to go this way you'll need to keep these system completely isolated from the existing network ideally on a separate unconnected LAN.

    Col

    +
    0 Votes
    techin

    Thanks Darryl for your answer. You explanation was quite clear and I did not need more to understand.

    I red your post this morning and I installed Kaspersky right after that.

    +
    0 Votes
    techin

    I guest I don't really have the choice. Having both Deep Freeze and anti-virus is at some point an ugly but necessary solution.

    I have been told that kaspersky and Deep Freeze don't work well together even with the possibility to unlock some folders. Kaspersky updates have to be done manually.

    Faronics is coming soon with their own ant-virus solution. I'm impatient to get it!

    Thanks

    +
    0 Votes
    SmartAceW0LF

    Microsofts Steady State. It apparently was developed specifically for the situation you find yourself in. (Student-related access) Unfortunately, I have not had the time (the need hasn't come to the front) to research it yet. That said, the 2 I know who have made the change give Steady State the nod. As for protection from the most common of malware that I encounter these days, the rogue anti-virus variations of vundo, Malwarebytes Anti-Malware's Proactive protection (paid for) coupled with MS Security Essentials has been most effective. Worthy of consideration in that it seems most infections these days target Facebook and MySpace users. A good percentage of most users these days are subscribed to one or the other. In my honest opinion, I can not emphasize enough the MBAM prong. Money well spent.

    +
    0 Votes
    santeewelding

    I am set up much the same -- MBAM paid and active, along with Essentials.

    techin raises good questions. Raises good, real-time personal experience, too.

    I'll shut up, now, eager to hear and learn more.

    +
    0 Votes
    oceano76

    Hi,
    We use Returnil Virtual System and we believe it is a better solution. We tired a number of similar products and I have to say that Returnil is by far the best. It has a very powerful web management console and also offer MBR protection, which other do not offer. Have a try:

    www.returnil.com

    Thanks.

    +
    0 Votes
    mustafacan

    Deep Freeze purpose is different. It will do a restore at reboot, which means it will bring your computer to the state it was when you installed deep freeze. A better alternative will be Rollback Rx.

    Col gave a good explanation: the malware can propagate thru the network and you may not be able to fix all affected computers.

    Work with Rollback Rx and a good anti virus/malware/ and you should be safer.

  • +
    0 Votes
    Darryl~ Moderator

    they are still connected to the network & there is the potential for security issues because of that. Deep Freeze will only protect the computers it is installed on, they will be able to be returned to their previous stat if a virus etc is encountered but if it makes it into the network, there is the possibility that the domain could become infected.

    It would be best to put the stand alone computers on the outside of the firewall or in the DMZ.

    +
    0 Votes
    OH Smeg

    While Deep Freeze is a good product it will not stop a computer becoming infected with something it will at best return it to the way it was on the restart and kill any infection from the previous session. It will do nothing to stop the Propagation of Infections while the session is running or the spread of infections.

    Then when you consider the way that the writes of these infections are going it may not be possible to return the system to a uninfected state on the restart at some point in the future.

    So overall I would say no Deep Freeze by itself will not be sufficient. But if you have to go this way you'll need to keep these system completely isolated from the existing network ideally on a separate unconnected LAN.

    Col

    +
    0 Votes
    techin

    Thanks Darryl for your answer. You explanation was quite clear and I did not need more to understand.

    I red your post this morning and I installed Kaspersky right after that.

    +
    0 Votes
    techin

    I guest I don't really have the choice. Having both Deep Freeze and anti-virus is at some point an ugly but necessary solution.

    I have been told that kaspersky and Deep Freeze don't work well together even with the possibility to unlock some folders. Kaspersky updates have to be done manually.

    Faronics is coming soon with their own ant-virus solution. I'm impatient to get it!

    Thanks

    +
    0 Votes
    SmartAceW0LF

    Microsofts Steady State. It apparently was developed specifically for the situation you find yourself in. (Student-related access) Unfortunately, I have not had the time (the need hasn't come to the front) to research it yet. That said, the 2 I know who have made the change give Steady State the nod. As for protection from the most common of malware that I encounter these days, the rogue anti-virus variations of vundo, Malwarebytes Anti-Malware's Proactive protection (paid for) coupled with MS Security Essentials has been most effective. Worthy of consideration in that it seems most infections these days target Facebook and MySpace users. A good percentage of most users these days are subscribed to one or the other. In my honest opinion, I can not emphasize enough the MBAM prong. Money well spent.

    +
    0 Votes
    santeewelding

    I am set up much the same -- MBAM paid and active, along with Essentials.

    techin raises good questions. Raises good, real-time personal experience, too.

    I'll shut up, now, eager to hear and learn more.

    +
    0 Votes
    oceano76

    Hi,
    We use Returnil Virtual System and we believe it is a better solution. We tired a number of similar products and I have to say that Returnil is by far the best. It has a very powerful web management console and also offer MBR protection, which other do not offer. Have a try:

    www.returnil.com

    Thanks.

    +
    0 Votes
    mustafacan

    Deep Freeze purpose is different. It will do a restore at reboot, which means it will bring your computer to the state it was when you installed deep freeze. A better alternative will be Rollback Rx.

    Col gave a good explanation: the malware can propagate thru the network and you may not be able to fix all affected computers.

    Work with Rollback Rx and a good anti virus/malware/ and you should be safer.