Recently, I had a user with an infected laptop (several type PWS Trojans?first and worst case thus far to come across my desk). I?ve been pondering for a while now how to manage these evolving threats in a corporate network while maintaining productive and independent users.
Discussion about implementing software firewall brought mixed results?not all admins are convinced of the effectiveness due to questionable user friendliness of some of the latest software. Some suggested that users might just turn a software firewall off completely if annoyed by it. It seems that any adjustment increases the need for user support (to me, that?s a step back).
Currently, we use the latest version of an Enterprise antivirus suite on all laptops (and the Windows firewall, enforced by group policy to be turned on when the laptop is outside of the corp network)–this appears to be effective and user-friendly. OS and productivity suite updates are downloaded automatically, and installed by users.
The bottom line is that I feel completely uneasy about a growing uncertainty. I?m curious what others out there are thinking, experiencing, and fighting in the corporate IT network environment with managing more and more mobile users?