Can I quote you on some of this? I'm always looking for ammo when it comes to changing my group to a more aggressive style.
-----Original Message----- From: Blunt, James H (Jim) [mailto:[EMAIL PROTECTED]] Sent: Thursday, December 27, 2001 11:21 AM To: Exchange Discussions Subject: RE: AV! a full time job? Eric, We are using the same AV you are and we are approximately the same size you are. We got the Symantec Corporate 7.6 upgrade about a week ago. Side Note: With XP/NAV 7.6 installed on a workstation, you will have to turn off your AV software before trying to burn a CD. As Ed Crowley (ONE of my heroes among MANY on this list) is so fond of stating, "There are seldom good technological solutions to behavioral problems." Your management needs to do what our management here has done. No server OR workstation is connected to our network, without our permission...period. People are going to whine and cry until they get used to it, but both your life and theirs will be less stressful and simpler, once this is done. We have about 950 users, with about 1150 workstations and servers. Two of the departments in our IT org are the Help Desk and the Network Infrastructure departments. No workstation is allowed on the network without the Help Desk first installing an image that contains all the basic workstation apps, NAV for the desktop, SMS 2.0, patches, upgrades, blah blah blah. No server is ever put on the network without our Network Infrastructure group building the server ourselves. Once a server is built, it goes into the cypher-locked server room...Nobody but the Ifrastructure group has access to the server room. Now...once you have all that in place, you are set to introduce the company to SMS 2.0. Our SMS Admin has created NAV packages, based on the workstation type found by the login script. The login script checks for SMS...if not there somehow, it's logged in the SMS DB and the Help Desk is sent out to install it. Once that happens, the machine is assimilated, software inventory is done, NAV is installed and the WS is virus scanned. NAV on the WS is locked down and cannot be turned off. The uninstall is password protected. If they *somehow* manage to get it uninstalled, then the next time they logon, it's reinstalled. NAV can be set up to download the latest .dat files at a specific time, pushed out to distribution points and then to the WS's and servers...much like SMS. Not only that, but we also have a Linux 7.0 mail relayer running Qmail and Qmail Scan that blocks attachment and subject types before ever getting to the network. We haven't been infected since before Melissa <<<knock on wood>>>. Jim Blunt Network / E-mail Admin Network / Infrastructure Group Bechtel Hanford, Inc. 509-372-9188 -----Original Message----- From: Hansen, Eric [mailto:[EMAIL PROTECTED]] Sent: Thursday, December 27, 2001 9:04 AM To: Exchange Discussions Subject: RE: AV! a full time job? Symantec Corporate, 7.5. Waiting for 7.6 to arrive. We also will be purchasing a Mcafee e500. A good portion of or problems relate to a LAZY supervisor and several departments that are in charge of their own equipment. Just yesterday we ran into a lab that had 15 new machines on our domain that we didn't know about. All without any AV and 2 were nimda monsters. -----Original Message----- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Thursday, December 27, 2001 9:03 AM To: Exchange Discussions Subject: RE: AV! a full time job? What are you using for your AV solution? -----Original Message----- From: Hansen, Eric [mailto:[EMAIL PROTECTED]] Sent: Thursday, December 27, 2001 9:00 AM To: Exchange Discussions Subject: RE: AV! a full time job? At 1300 machines given the problems we appear to be having, the guy that does our AV wants a FTE created for it because he feels it would be appropriate. -----Original Message----- From: Drewski [mailto:[EMAIL PROTECTED]] Sent: Thursday, December 27, 2001 9:01 AM To: Exchange Discussions Subject: RE: AV! a full time job? How big is your company? Is 10,000 users enough for it to be a full time job? 100,000 users? It varies from org to org. -- Drew ******************************** Visit http://www.drewncapris.net! Go! Go there now! Violence ends by defeating itself. It creates bitterness in the survivors and brutality in the destroyers. --Dr. Martin Luther King, Jr. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Brian Ko Sent: Thursday, December 27, 2001 10:57 AM To: Exchange Discussions Subject: RE: AV! a full time job? I don't think this is a full time job. If you have a full time position just for A/V, you'd have to have a backup person since viruses do not take any vacation. Instead of having full time position, pay A/V vendor to notify you (& other support staffs) when there's new virus via pager, cell phone, email, etc. If you want to have closer relationship with A/V vendor, pay more money to have someone like Technical Account Manager, TAM. Once you have those communcation method established, you have to have software that can distribute updates automatically and fast. My two cents... -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Hansen, Eric Sent: Wednesday, December 26, 2001 4:24 PM To: Exchange Discussions Subject: AV! a full time job? Just curious what some of the Exchange Admins think. Would you consider Antivirus a full time job? I speak for both email and network/desktop. Around here it isn't, although we wish it was cause it seems to be getting neglected. We are around 1300 users right now. e- _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
