This is why Microsoft got hit so hard with the Nimda virus. If one is going to allow dev machines to have contact with a production network, I think a vulnerability scanner and automated system to isolate rogue machines would be a must.
> -----Original Message----- > From: Thomas Di Nardo [mailto:[EMAIL PROTECTED]] > Sent: Sunday, December 30, 2001 10:15 AM > To: Exchange Discussions > Subject: RE: AV! a full time job? > > > Kumindra, I respectfully disagree. > > Martin is correct on this one. The LAST thing you want is > people on the dev team moving boxes back and forth between a > dev network and a prod network. That is definitely a recipe > for disaster. In a large environment, the dev people rarely, > if ever, are responsible for supporting anything in the > production environment. You want one group that is > responsible for this type of work, and a change management > system that requires approvals before machines are put on the > prod network. Doing it any other way in a large environment > is an exercise in masochism. Even with a CM process in place, > you are bound to get screwed from time to time, but it does > minimize the occurrences. > > I can't even imagine the nightmare you would have if there > were three test networks and everyone had free reign to move > boxes from those test networks to the prod network. You might > as well say you have four test networks. You would rarely > have a clue what broke or who did it. The only thing you > could be sure of in the environment you describe is > everything being screwed up and anyone with a brain shopping > their resume. > > My $.02 > > Tom. > > > -----Original Message----- > From: Kuminda Chandimith [mailto:[EMAIL PROTECTED]] > Sent: Sunday, December 30, 2001 5:05 AM > To: Exchange Discussions > Subject: RE: AV! a full time job? > > I disagree with this, Specially y if you have a Development team. > > We used to have a separate Development domain, (infact 2 or 3 > of them) We may be setting up and removing domain servers in > regular basis, for various R&D and Development related work. > > What one Can do is to physically move those computers out of > the main network, But then people might have communication > problems. I don't have much Of experience in how to manage > such installations, but We some how managed with a little bit > of extra discipline from the "Developers side". > > > > > Kuminda Chandimith > Sr. Technical Consultant > Ducont.com FZ-LLC > Tel: + 971-4-3913000 Ext 237 > Fax: +971-4-3913001 > http://www.ducont.com > > > > -----Original Message----- > From: Martin Blackstone [mailto:[EMAIL PROTECTED]] > Sent: 27 December 2001 21:11 > To: Exchange Discussions > Subject: RE: AV! a full time job? > > > So it really isn't a matter of too much work, but rather a > matter of poor management. In any company, but in particular > one your size, allowing departments to manage computers is a > recipe for disaster. It probably seemed like a good idea at > the time, but not any longer. There should be a central point > of contact for all machines. Orders are placed through that > group and delivered to them for configuration and delivery to > the end users or departments. That way all hardware is fully > tracked and managed. You should be using logon scripts as one > method of pushing out AV installs and DAT updates. That way > for someone to login, AV software has to be installed. > > I would suggest rather than spend 50-60K a year for an AV > tech, that you put that time / money into better management. > Ill bet you if you went to upper management and said "OK, we > need a new hardware procedure, OR we need to spend 60K a year > for an AV guy, they would let you have your way" > > -----Original Message----- > From: Hansen, Eric [mailto:[EMAIL PROTECTED]] > Sent: Thursday, December 27, 2001 9:04 AM > To: Exchange Discussions > Subject: RE: AV! a full time job? > > > Symantec Corporate, 7.5. Waiting for 7.6 to arrive. We also > will be purchasing a Mcafee e500. > > A good portion of or problems relate to a LAZY supervisor and > several departments that are in charge of their own > equipment. Just yesterday we ran into a lab that had 15 new > machines on our domain that we didn't know about. All > without any AV and 2 were nimda monsters. > > -----Original Message----- > From: Martin Blackstone [mailto:[EMAIL PROTECTED]] > Sent: Thursday, December 27, 2001 9:03 AM > To: Exchange Discussions > Subject: RE: AV! a full time job? > > What are you using for your AV solution? > > -----Original Message----- > From: Hansen, Eric [mailto:[EMAIL PROTECTED]] > Sent: Thursday, December 27, 2001 9:00 AM > To: Exchange Discussions > Subject: RE: AV! a full time job? > > > At 1300 machines given the problems we appear to be having, > the guy that does our AV wants a FTE created for it because > he feels it would be appropriate. > > -----Original Message----- > From: Drewski [mailto:[EMAIL PROTECTED]] > Sent: Thursday, December 27, 2001 9:01 AM > To: Exchange Discussions > Subject: RE: AV! a full time job? > > How big is your company? > > Is 10,000 users enough for it to be a full time job? 100,000 users? > > It varies from org to org. > > -- Drew > ******************************** > Visit http://www.drewncapris.net! Go! Go there now! > Violence ends by defeating itself. It creates bitterness in > the survivors and brutality in the destroyers. --Dr. Martin > Luther King, Jr. > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Brian Ko > Sent: Thursday, December 27, 2001 10:57 AM > To: Exchange Discussions > Subject: RE: AV! a full time job? > > > I don't think this is a full time job. If you have a full time > position just for A/V, you'd have to have a backup person > since viruses > do not take any vacation. Instead of having full time position, pay > A/V vendor to notify you (& other support staffs) when > there's new virus via pager, cell phone, email, etc. If you > want to have closer relationship with A/V vendor, pay more > money to have someone like Technical Account Manager, TAM. > Once you have those communcation method established, you have > to have software that can distribute updates automatically and fast. > > My two cents... > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]] On Behalf Of Hansen, Eric > Sent: Wednesday, December 26, 2001 4:24 PM > To: Exchange Discussions > Subject: AV! a full time job? > > > > Just curious what some of the Exchange Admins think. Would > you consider Antivirus a full time job? I speak for both > email and network/desktop. > > > Around here it isn't, although we wish it was cause it seems > to be getting neglected. We are around 1300 users right now. > > e- > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
