Eric,

We are using the same AV you are and we are approximately the same size you
are.  We got the Symantec Corporate 7.6 upgrade about a week ago.  Side
Note:  With XP/NAV 7.6 installed on a workstation, you will have to turn off
your AV software before trying to burn a CD.

As Ed Crowley (ONE of my heroes among MANY on this list) is so fond of
stating, "There are seldom good technological solutions to behavioral
problems."  Your management needs to do what our management here has done.
No server OR workstation is connected to our network, without our
permission...period.  People are going to whine and cry until they get used
to it, but both your life and theirs will be less stressful and simpler,
once this is done.

We have about 950 users, with about 1150 workstations and servers.  Two of
the departments in our IT org are the Help Desk and the Network
Infrastructure departments.  No workstation is allowed on the network
without the Help Desk first installing an image that contains all the basic
workstation apps, NAV for the desktop, SMS 2.0, patches, upgrades, blah blah
blah.  No server is ever put on the network without our Network
Infrastructure group building the server ourselves.  Once a server is built,
it goes into the cypher-locked server room...Nobody but the Ifrastructure
group has access to the server room.

Now...once you have all that in place, you are set to introduce the company
to SMS 2.0.  Our SMS Admin has created NAV packages, based on the
workstation type found by the login script.  The login script checks for
SMS...if not there somehow, it's logged in the SMS DB and the Help Desk is
sent out to install it.  Once that happens, the machine is assimilated,
software inventory is done, NAV is installed and the WS is virus scanned.
NAV on the WS is locked down and cannot be turned off.  The uninstall is
password protected.  If they *somehow* manage to get it uninstalled, then
the next time they logon, it's reinstalled.  NAV can be set up to download
the latest .dat files at a specific time, pushed out to distribution points
and then to the WS's and servers...much like SMS.

Not only that, but we also have a Linux 7.0 mail relayer running Qmail and
Qmail Scan that blocks attachment and subject types before ever getting to
the network.  We haven't been infected since before Melissa <<<knock on
wood>>>.

Jim Blunt
Network / E-mail Admin
Network / Infrastructure Group
Bechtel Hanford, Inc.
509-372-9188
-----Original Message-----
From: Hansen, Eric [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, December 27, 2001 9:04 AM
To: Exchange Discussions
Subject: RE: AV! a full time job?


Symantec Corporate, 7.5.  Waiting for 7.6 to arrive.  We also will be
purchasing a Mcafee e500.

A good portion of or problems relate to a LAZY supervisor and several
departments that are in charge of their own equipment.  Just yesterday we
ran into a lab that had 15 new machines on our domain that we didn't know
about.  All without any AV and 2 were nimda monsters.

-----Original Message-----
From: Martin Blackstone [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, December 27, 2001 9:03 AM
To: Exchange Discussions
Subject: RE: AV! a full time job?

What are you using for your AV solution?

-----Original Message-----
From: Hansen, Eric [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, December 27, 2001 9:00 AM
To: Exchange Discussions
Subject: RE: AV! a full time job?


At 1300 machines given the problems we appear to be having, the guy that
does our AV wants a FTE created for it because he feels it would be
appropriate.

-----Original Message-----
From: Drewski [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, December 27, 2001 9:01 AM
To: Exchange Discussions
Subject: RE: AV! a full time job?

How big is your company?

Is 10,000 users enough for it to be a full time job?  100,000 users?

It varies from org to org.

-- Drew
********************************
Visit http://www.drewncapris.net!  Go!  Go there now!
Violence ends by defeating itself. It creates bitterness in the survivors
and brutality in the destroyers. --Dr. Martin Luther King, Jr.

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Brian Ko
Sent: Thursday, December 27, 2001 10:57 AM
To: Exchange Discussions
Subject: RE: AV! a full time job?


I don't think this is a full time job.   If you have a full time
position just for A/V, you'd have to have a backup person since viruses
do not take any vacation.   Instead of having full time position, pay
A/V vendor to notify you (& other support staffs) when there's new virus via
pager, cell phone, email, etc.  If you want to have closer relationship with
A/V vendor, pay more money to have someone like Technical Account Manager,
TAM.  Once you have those communcation method established, you have to have
software that can distribute updates automatically and fast.

My two cents...

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Hansen, Eric
Sent: Wednesday, December 26, 2001 4:24 PM
To: Exchange Discussions
Subject: AV! a full time job?



Just curious what some of the Exchange Admins think.  Would you consider
Antivirus a full time job?  I speak for both email and network/desktop.


Around here it isn't, although we wish it was cause it seems to be getting
neglected.  We are around 1300 users right now.

e-

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]


_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]


_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to