RE: Sophos vs. Vipre Enterprise (now that we have tested both)

2010-08-20 Thread Alex Eckelberry
Thanks Jeff, and I'm glad I made it as a Level 5 ;-)

Alex




From: Jeff S. Gottlieb [mailto:jeff.s.gottl...@gmail.com]
Sent: Tuesday, August 17, 2010 11:38 AM
To: NT System Admin Issues
Cc: Jason Chronowitz; 'NT System Admin Issues'
Subject: RE: Sophos vs. Vipre Enterprise (now that we have tested both)

BS'D
Comments below...

From: Alex Eckelberry [mailto:al...@sunbelt-software.com]
Sent: Saturday, August 14, 2010 6:51 AM
To: NT System Admin Issues
Cc: Jason Chronowitz
Subject: RE: Sophos vs. Vipre Enterprise (now that we have tested both)

Jeff -- thanks for this.

This will sound odd, but I like having VIPRE compared to Sophos, as opposed to 
many others.  It's a very decent product and a product we look at as being in 
the same class as VIPRE.

With regard to your points:

Exclusions -- the next major release of VIPRE (Q4) will have best-practices 
templates, which will pre-define roles for various types of systems.  This will 
dramatically help in pre-defining exclusions for servers.

Updates -- We actually turned on hourly updates a few months ago, and found 
users didn't like it.  I think a lot of that had to do with the updating scheme 
inside the product, which spiked CPU usage when applying the update.  The next 
minor update to VIPRE has code written in it to allow going back to hourly 
updates.

24/7 support -- Got it.  We are working on improving weekend support, and I 
expect you'll find things getting quite a bit better. Your general comments 
about support are also perfectly reasonable and we will continue to improve.

Reboots -- New code is being written to separate non-boot required functions 
from boot-required functions, which will enable us to only require a reboot in 
certain occasions.  Our developers have been beaten into submission on this 
subject, and they are now terrified of releasing update which requires a reboot 
;-)

Sophos actually does require reboots, but they schedule it around major 
upgrades, and they push all the reboot-required functions into one release (I 
believe they have a policy of only doing reboots once a year). Might be the 
case...and a schedule that we can live with. However, not doing a reboot around 
a deployment --- I would like some more information on this.  Was this on 
Vista/Windows 7 machines?  Or on XP machines?  On XP and below, it is 
technically impossible not to require a reboot, based on the driver model 
(there are some exceptions to this, but it's a long technical discussion). 
Empirically yes, NO reboots are required for the agent deployment of XP and 
Server 2003 only... 
http://www.sophos.com/support/knowledgebase/article/11006.html

Once again, thanks for the frank evaluation, and I can assure you this email 
has plenty of readers inside the organization.

BTW Good to Great, by Jim Collins is a excellent read. The answers to what 
makes a good company great are in this book. IMHO Sunbelt Software is 
experiencing Level 5 Leadership. Sorry, off-topic, and I don't mean to 
patronize, just my frank observation!! Continued success... 
http://www.bizsum.com/articles/art_good-to-great.php

Alex

Alex Eckelberry, CEO
Sunbelt Software
33 N. Garden Avenue, Clearwater, FL 33755 p: 727-562-0101 x220
e: a...@sunbeltsoftware.commailto:a...@sunbeltsoftware.com MSN: 
alex...@hotmail.commailto:alex...@hotmail.com
w: 
www.sunbeltsoftware.comfile:///C:\Documents%20and%20Settings\exec3\Application%20Data\Microsoft\Signatures\www.sunbeltsoftware.com
 b: 
www.sunbeltblog.comfile:///C:\Documents%20and%20Settings\exec3\Application%20Data\Microsoft\Signatures\www.sunbeltblog.com








From: Jeff S. Gottlieb [mailto:jeff.s.gottl...@gmail.com]
Sent: Wednesday, August 11, 2010 4:56 PM
To: NT System Admin Issues
Subject: Sophos vs. Vipre Enterprise (now that we have tested both)

We are in an SMB environment of roughly 60 servers and 1000 hosts, including 
Server 2003, 2008, SBS2003, SBS2008, XP Pro SP3, Windows 7, and Vista 
workstations. Sophos Endpoint Security along with PureMessaging, and Vipre 
Enterprise Premium along with Vipre Email Security are being put to the test 
head-to-head.

We are staunch fans of Sunbelt Software.  Our experiences with Vipre Email 
Security (much improved over Ninja) has been great over the years.  For over 
10-years we have placed our trust in Trend Micro, something that has 
deteriorated slowly over the past 24-months.  In any event, we are hoping that 
our published comparisons will meet objectivity, and help to give reassurance 
to future Vipre users regardless of the decisions we ultimately made.

The Sunbelt 'NT System Admin Issues' forum has been a great help, dating back 
to April, more specifically...

4/01/2010 Subject: Enterprise Anti-Virus, 
rz...@qwest.netmailto:rz...@qwest.net
4/21/2010 Subject: Sophos vs. Vipre Enterprise, 
jholmg...@xlhealth.commailto:jholmg...@xlhealth.com
5/06/2010 Subject: NOD32 Antivirus, 
jda...@asmail.ucdavis.edumailto:jda...@asmail.ucdavis.edu
5/09

RE: Sophos vs. Vipre Enterprise (now that we have tested both)

2010-08-17 Thread Jeff S. Gottlieb
BS'D

Comments below.

 

From: Alex Eckelberry [mailto:al...@sunbelt-software.com] 
Sent: Saturday, August 14, 2010 6:51 AM
To: NT System Admin Issues
Cc: Jason Chronowitz
Subject: RE: Sophos vs. Vipre Enterprise (now that we have tested both)

 

Jeff -- thanks for this.  

 

This will sound odd, but I like having VIPRE compared to Sophos, as opposed
to many others.  It's a very decent product and a product we look at as
being in the same class as VIPRE. 

 

With regard to your points:

 

Exclusions -- the next major release of VIPRE (Q4) will have best-practices
templates, which will pre-define roles for various types of systems.  This
will dramatically help in pre-defining exclusions for servers.  

 

Updates -- We actually turned on hourly updates a few months ago, and found
users didn't like it.  I think a lot of that had to do with the updating
scheme inside the product, which spiked CPU usage when applying the update.
The next minor update to VIPRE has code written in it to allow going back to
hourly updates.  

 

24/7 support -- Got it.  We are working on improving weekend support, and I
expect you'll find things getting quite a bit better. Your general comments
about support are also perfectly reasonable and we will continue to improve.


 

Reboots -- New code is being written to separate non-boot required functions
from boot-required functions, which will enable us to only require a reboot
in certain occasions.  Our developers have been beaten into submission on
this subject, and they are now terrified of releasing update which requires
a reboot ;-) 

 

Sophos actually does require reboots, but they schedule it around major
upgrades, and they push all the reboot-required functions into one release
(I believe they have a policy of only doing reboots once a year). Might be
the case.and a schedule that we can live with. However, not doing a reboot
around a deployment --- I would like some more information on this.  Was
this on Vista/Windows 7 machines?  Or on XP machines?  On XP and below, it
is technically impossible not to require a reboot, based on the driver model
(there are some exceptions to this, but it's a long technical discussion).
Empirically yes, NO reboots are required for the agent deployment of XP
and Server 2003 only.
http://www.sophos.com/support/knowledgebase/article/11006.html

 

Once again, thanks for the frank evaluation, and I can assure you this email
has plenty of readers inside the organization.

 

BTW Good to Great, by Jim Collins is a excellent read. The answers to what
makes a good company great are in this book. IMHO Sunbelt Software is
experiencing Level 5 Leadership. Sorry, off-topic, and I don't mean to
patronize, just my frank observation!! Continued success.
http://www.bizsum.com/articles/art_good-to-great.php

 

Alex 

Alex Eckelberry, CEO 
Sunbelt Software
33 N. Garden Avenue, Clearwater, FL 33755 p: 727-562-0101 x220 
e: a...@sunbeltsoftware.com MSN: alex...@hotmail.com 
w:
file:///C:\Documents%20and%20Settings\exec3\Application%20Data\Microsoft\Si
gnatures\www.sunbeltsoftware.com www.sunbeltsoftware.com b:
file:///C:\Documents%20and%20Settings\exec3\Application%20Data\Microsoft\Si
gnatures\www.sunbeltblog.com www.sunbeltblog.com

 

 

 

 

 

 

 

  _  

From: Jeff S. Gottlieb [mailto:jeff.s.gottl...@gmail.com] 
Sent: Wednesday, August 11, 2010 4:56 PM
To: NT System Admin Issues
Subject: Sophos vs. Vipre Enterprise (now that we have tested both)

 

We are in an SMB environment of roughly 60 servers and 1000 hosts, including
Server 2003, 2008, SBS2003, SBS2008, XP Pro SP3, Windows 7, and Vista
workstations. Sophos Endpoint Security along with PureMessaging, and Vipre
Enterprise Premium along with Vipre Email Security are being put to the test
head-to-head.

 

We are staunch fans of Sunbelt Software.  Our experiences with Vipre Email
Security (much improved over Ninja) has been great over the years.  For over
10-years we have placed our trust in Trend Micro, something that has
deteriorated slowly over the past 24-months.  In any event, we are hoping
that our published comparisons will meet objectivity, and help to give
reassurance to future Vipre users regardless of the decisions we ultimately
made.

 

The Sunbelt 'NT System Admin Issues' forum has been a great help, dating
back to April, more specifically.

 

4/01/2010 Subject: Enterprise Anti-Virus, rz...@qwest.net

4/21/2010 Subject: Sophos vs. Vipre Enterprise, jholmg...@xlhealth.com

5/06/2010 Subject: NOD32 Antivirus, jda...@asmail.ucdavis.edu

5/09/2010 Subject: Life just keeps getting better, kurt.b...@gmail.com

7/29/2010 Subject: Vipre effectiveness  false positives,
c.house...@gmail.com

 

1) Installation / Deployment

Server installs both went smooth.  In deployment Sophos had few if any
issues. Viper deployment to server required countless exclusions (painfully
so). in fact when our server crashed, we were told that a few exclusions
were missing (Agh!). Viper deployment

RE: Sophos vs. Vipre Enterprise (now that we have tested both)

2010-08-14 Thread Alex Eckelberry
Jeff -- thanks for this.

This will sound odd, but I like having VIPRE compared to Sophos, as opposed to 
many others.  It's a very decent product and a product we look at as being in 
the same class as VIPRE.

With regard to your points:

Exclusions -- the next major release of VIPRE (Q4) will have best-practices 
templates, which will pre-define roles for various types of systems.  This will 
dramatically help in pre-defining exclusions for servers.

Updates -- We actually turned on hourly updates a few months ago, and found 
users didn't like it.  I think a lot of that had to do with the updating scheme 
inside the product, which spiked CPU usage when applying the update.  The next 
minor update to VIPRE has code written in it to allow going back to hourly 
updates.

24/7 support -- Got it.  We are working on improving weekend support, and I 
expect you'll find things getting quite a bit better. Your general comments 
about support are also perfectly reasonable and we will continue to improve.

Reboots -- New code is being written to separate non-boot required functions 
from boot-required functions, which will enable us to only require a reboot in 
certain occasions.  Our developers have been beaten into submission on this 
subject, and they are now terrified of releasing update which requires a reboot 
;-)

Sophos actually does require reboots, but they schedule it around major 
upgrades, and they push all the reboot-required functions into one release (I 
believe they have a policy of only doing reboots once a year).  However, not 
doing a reboot around a deployment --- I would like some more information on 
this.  Was this on Vista/Windows 7 machines?  Or on XP machines?  On XP and 
below, it is technically impossible not to require a reboot, based on the 
driver model (there are some exceptions to this, but it's a long technical 
discussion).

Once again, thanks for the frank evaluation, and I can assure you this email 
has plenty of readers inside the organization.


Alex

Alex Eckelberry, CEO
Sunbelt Software
33 N. Garden Avenue, Clearwater, FL 33755 p: 727-562-0101 x220
e: a...@sunbeltsoftware.com MSN: alex...@hotmail.commailto:alex...@hotmail.com
w: 
www.sunbeltsoftware.comfile:///C:/Documents%20and%20Settings/exec3/Application%20Data/Microsoft/Signatures/www.sunbeltsoftware.com
 b: 
www.sunbeltblog.comfile:///C:/Documents%20and%20Settings/exec3/Application%20Data/Microsoft/Signatures/www.sunbeltblog.com









From: Jeff S. Gottlieb [mailto:jeff.s.gottl...@gmail.com]
Sent: Wednesday, August 11, 2010 4:56 PM
To: NT System Admin Issues
Subject: Sophos vs. Vipre Enterprise (now that we have tested both)


We are in an SMB environment of roughly 60 servers and 1000 hosts, including 
Server 2003, 2008, SBS2003, SBS2008, XP Pro SP3, Windows 7, and Vista 
workstations. Sophos Endpoint Security along with PureMessaging, and Vipre 
Enterprise Premium along with Vipre Email Security are being put to the test 
head-to-head.

We are staunch fans of Sunbelt Software.  Our experiences with Vipre Email 
Security (much improved over Ninja) has been great over the years.  For over 
10-years we have placed our trust in Trend Micro, something that has 
deteriorated slowly over the past 24-months.  In any event, we are hoping that 
our published comparisons will meet objectivity, and help to give reassurance 
to future Vipre users regardless of the decisions we ultimately made.

The Sunbelt 'NT System Admin Issues' forum has been a great help, dating back 
to April, more specifically...

4/01/2010 Subject: Enterprise Anti-Virus, 
rz...@qwest.netmailto:rz...@qwest.net
4/21/2010 Subject: Sophos vs. Vipre Enterprise, 
jholmg...@xlhealth.commailto:jholmg...@xlhealth.com
5/06/2010 Subject: NOD32 Antivirus, 
jda...@asmail.ucdavis.edumailto:jda...@asmail.ucdavis.edu
5/09/2010 Subject: Life just keeps getting better, 
kurt.b...@gmail.commailto:kurt.b...@gmail.com
7/29/2010 Subject: Vipre effectiveness  false positives, 
c.house...@gmail.commailto:c.house...@gmail.com

1) Installation / Deployment
Server installs both went smooth.  In deployment Sophos had few if any issues. 
Viper deployment to server required countless exclusions (painfully so)... in 
fact when our server crashed, we were told that a few exclusions were missing 
(Agh!). Viper deployment to host on two systems came with MANY surprises. The 
Vipre agent loaded a NDIS IM element in the TCPIP stack, causing CISCO 
(IPSec) clients to connect... oddly not allowing us to remote TS, Dameware, and 
other remote applications. SonicWall VPN clients remained unaffected. Vipre 
even caused slowness, freezing during printing, multi-tasking, and issues with 
Adobe Acrobat. Some of these issues we just gave up on attempting to resolve 
and disabled the firewall entirely. When a MSP firm cannot remote access...this 
is serious!! We couldn't get support soon enough... and unfortunately cases 
remain open 4-5 days after the fact. 

RE: Sophos vs. Vipre Enterprise (now that we have tested both)

2010-08-12 Thread John Aldrich
Interesting observation on the Agent reboots. I've had Vipre here for about
6 months now and rarely have we needed to reboot our systems since upgrading
to Vipre Enterprise 4.0. Yes, Vipre 3.5 did require reboots on agent
updates, but Vipre 4 has not, in my experience, required a reboot for an
agent update. You don't state which version of Vipre you were testing, but
I'm guessing you tested Vipre 3.5. You may be pleasantly surprised by Vipre
Enterprise 4.

 

John-AldrichTile-Tools

 

From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Wednesday, August 11, 2010 5:54 PM
To: NT System Admin Issues
Subject: Re: Sophos vs. Vipre Enterprise (now that we have tested both)

 

Well done on the evaluation, Jeff.

 

I expect that it will be helpful to many, including Sunbelt.



ASB  http://XeeSM.com/AndrewBaker (My XeeSM Profile) 
Exploiting Technology for Business Advantage...
 

Signature powered by  http://www.wisestamp.com/email-install WiseStamp 

 

On Wed, Aug 11, 2010 at 4:56 PM, Jeff S. Gottlieb
jeff.s.gottl...@gmail.com wrote:

 

We are in an SMB environment of roughly 60 servers and 1000 hosts, including
Server 2003, 2008, SBS2003, SBS2008, XP Pro SP3, Windows 7, and Vista
workstations. Sophos Endpoint Security along with PureMessaging, and Vipre
Enterprise Premium along with Vipre Email Security are being put to the test
head-to-head.

 

We are staunch fans of Sunbelt Software.  Our experiences with Vipre Email
Security (much improved over Ninja) has been great over the years.  For over
10-years we have placed our trust in Trend Micro, something that has
deteriorated slowly over the past 24-months.  In any event, we are hoping
that our published comparisons will meet objectivity, and help to give
reassurance to future Vipre users regardless of the decisions we ultimately
made.

 

The Sunbelt 'NT System Admin Issues' forum has been a great help, dating
back to April, more specifically.

 

4/01/2010 Subject: Enterprise Anti-Virus, rz...@qwest.net

4/21/2010 Subject: Sophos vs. Vipre Enterprise, jholmg...@xlhealth.com

5/06/2010 Subject: NOD32 Antivirus, jda...@asmail.ucdavis.edu

5/09/2010 Subject: Life just keeps getting better, kurt.b...@gmail.com

7/29/2010 Subject: Vipre effectiveness  false positives,
c.house...@gmail.com

 

1) Installation / Deployment

Server installs both went smooth.  In deployment Sophos had few if any
issues. Viper deployment to server required countless exclusions (painfully
so). in fact when our server crashed, we were told that a few exclusions
were missing (Agh!). Viper deployment to host on two systems came with MANY
surprises. The Vipre agent loaded a NDIS IM element in the TCPIP stack,
causing CISCO (IPSec) clients to connect. oddly not allowing us to remote
TS, Dameware, and other remote applications. SonicWall VPN clients remained
unaffected. Vipre even caused slowness, freezing during printing,
multi-tasking, and issues with Adobe Acrobat. Some of these issues we just
gave up on attempting to resolve and disabled the firewall entirely. When a
MSP firm cannot remote access.this is serious!! We couldn't get support soon
enough. and unfortunately cases remain open 4-5 days after the fact. Vipre
left our accounting department, using a PSA software (ConnectWise), locked
out for an entire day.

 

2) Post Installation

Sophos agent with firewall was documented as utilizing up to 150+ MB of RAM
(enormous). we were told, .the price you pay for good protection.  We were
not comforted, despite this fact the users never complained about slower
speeds.  Vipre utilized a fraction of this, maybe 7 MB. albeit given the
deployment issues (above) we remain unimpressed by any benefit there might
be. Sophos comes along with definitions updated hourly, Vipre (so we are
told) is heading in this direction too. Vipre currently is defaulted to
update every 3-hours, and that default can be changed (.the value??). 

 

3) 24-hour Enterprise support

Vipre Enterprise technicians we found were skilled, sadly they are scantily
available on weekend (evenings).

Sophos Endpoint Security we found were equally skilled and *always*
available.  Despite not having a Premium support agreement, we found
Sophos enthusiastic when it came to remote access (LogMeIn). If (in the rare
occasion) Vipre was asked to remote, remote was either unavailable or they
were flat out reluctant. Vipre on several occasions seemed overwhelmed.
Sophos *never* gave us that feeling.

 

4) Additional Items

Sophos PureMessaging (SPAM filter) catches SPAM well (notice we didn't say
unsolicited advertisements). If you differentiate (most do) between the two
you will NOT enjoy PureMessaging. Additionally with PureMessaging each
account receives email called spam digest, there are options to either
Delete or Deliver.  In either event chosen, this is a singular event. it
does NOT automatically allow or block these addresses on a going forward
basis. It's impossible meeting the demands of users wanting NOT to receive

Re: Sophos vs. Vipre Enterprise (now that we have tested both)

2010-08-12 Thread Eric Wittersheim
I just upgraded from 3 to 4 and all agents required a reboot.  Additionally,
Windows 7 clients and Server 2008 clients required 2 reboots. Ugg!

On Thu, Aug 12, 2010 at 8:00 AM, John Aldrich
jaldr...@blueridgecarpet.comwrote:

  Interesting observation on the Agent reboots. I’ve had Vipre here for
 about 6 months now and rarely have we needed to reboot our systems since
 upgrading to Vipre Enterprise 4.0. Yes, Vipre 3.5 did require reboots on
 agent updates, but Vipre 4 has not, in my experience, required a reboot for
 an agent update. You don’t state which version of Vipre you were testing,
 but I’m guessing you tested Vipre 3.5. You may be pleasantly surprised by
 Vipre Enterprise 4.



 [image: John-Aldrich][image: Tile-Tools]



 *From:* Andrew S. Baker [mailto:asbz...@gmail.com]
 *Sent:* Wednesday, August 11, 2010 5:54 PM
 *To:* NT System Admin Issues
 *Subject:* Re: Sophos vs. Vipre Enterprise (now that we have tested both)



 Well done on the evaluation, Jeff.



 I expect that it will be helpful to many, including Sunbelt.



 *ASB *(My XeeSM Profile) http://xeesm.com/AndrewBaker
 *Exploiting Technology for Business Advantage...*
 * *

 Signature powered by WiseStamp http://www.wisestamp.com/email-install



 On Wed, Aug 11, 2010 at 4:56 PM, Jeff S. Gottlieb 
 jeff.s.gottl...@gmail.com wrote:



 We are in an SMB environment of roughly 60 servers and 1000 hosts,
 including Server 2003, 2008, SBS2003, SBS2008, XP Pro SP3, Windows 7, and
 Vista workstations. Sophos Endpoint Security along with PureMessaging, and
 Vipre Enterprise Premium along with Vipre Email Security are being put to
 the test head-to-head.



 We are staunch fans of Sunbelt Software.  Our experiences with Vipre Email
 Security (much improved over Ninja) has been great over the years.  For over
 10-years we have placed our trust in Trend Micro, something that has
 deteriorated slowly over the past 24-months.  In any event, we are hoping
 that our published comparisons will meet objectivity, and help to give 
 reassurance
 to future Vipre users regardless of the decisions we ultimately made.



 The Sunbelt *'NT System Admin Issues'* forum has been a great help, dating
 back to April, more specifically…



 4/01/2010 Subject: Enterprise Anti-Virus, rz...@qwest.net

 4/21/2010 Subject: Sophos vs. Vipre Enterprise, jholmg...@xlhealth.com

 5/06/2010 Subject: NOD32 Antivirus, jda...@asmail.ucdavis.edu

 5/09/2010 Subject: Life just keeps getting better, kurt.b...@gmail.com

 7/29/2010 Subject: Vipre effectiveness  false positives,
 c.house...@gmail.com



 *1) Installation / Deployment*

 Server installs both went smooth.  In deployment Sophos had few if any
 issues. Viper deployment to server required countless exclusions (painfully
 so)… in fact when our server crashed, we were told that a few exclusions
 were missing (Agh!). Viper deployment to host on two systems came with MANY
 surprises. The Vipre agent loaded a “NDIS IM” element in the TCPIP stack,
 causing CISCO (IPSec) clients to connect… oddly not allowing us to remote
 TS, Dameware, and other remote applications. SonicWall VPN clients remained
 unaffected. Vipre even caused slowness, freezing during printing,
 multi-tasking, and issues with Adobe Acrobat. Some of these issues we just
 gave up on attempting to resolve and disabled the firewall entirely. When a
 MSP firm cannot remote access…this is serious!! We couldn’t get support soon
 enough… and unfortunately cases remain open 4-5 days after the fact. Vipre
 left our accounting department, using a PSA software (ConnectWise), locked
 out for an entire day.



 *2) Post Installation*

 Sophos agent with firewall was documented as utilizing up to 150+ MB of RAM
 (enormous)… we were told, “…the price you pay for good protection”.  We were
 not comforted, despite this fact the users never complained about slower
 speeds.  Vipre utilized a fraction of this, maybe 7 MB… albeit given the
 deployment issues (above) we remain unimpressed by any benefit there might
 be. Sophos comes along with definitions updated hourly, Vipre (so we are
 told) is heading in this direction too. Vipre currently is defaulted to
 update every 3-hours, and that default can be changed (…the value??).



 *3) 24-hour Enterprise support*

 Vipre Enterprise technicians we found were skilled, sadly they are scantily
 available on weekend (evenings).

 Sophos Endpoint Security we found were equally skilled and **always**
 available.  Despite not having a “Premium” support agreement, we found
 Sophos enthusiastic when it came to remote access (LogMeIn). If (in the rare
 occasion) Vipre was asked to remote, remote was either unavailable or they
 were flat out reluctant. Vipre on several occasions seemed overwhelmed…
 Sophos **never** gave us that feeling.



 *4) Additional Items*

 Sophos PureMessaging (SPAM filter) catches SPAM well (notice we didn’t say
 unsolicited advertisements). If you differentiate (most do) between the two
 you will *NOT* enjoy

RE: Sophos vs. Vipre Enterprise (now that we have tested both)

2010-08-12 Thread John Aldrich
Upgrade =/= update

 

During an upgrade from 3.5 to 4, I would expect to need to reboot. However,
I think you'll find that after the initial reboot(s) required to install the
new agent, etc that you won't have to reboot for updates. At least that's
been my experience.

 

John-AldrichTile-Tools

 

From: Eric Wittersheim [mailto:eric.wittersh...@gmail.com] 
Sent: Thursday, August 12, 2010 9:03 AM
To: NT System Admin Issues
Subject: Re: Sophos vs. Vipre Enterprise (now that we have tested both)

 

I just upgraded from 3 to 4 and all agents required a reboot.  Additionally,
Windows 7 clients and Server 2008 clients required 2 reboots. Ugg!

On Thu, Aug 12, 2010 at 8:00 AM, John Aldrich jaldr...@blueridgecarpet.com
wrote:

Interesting observation on the Agent reboots. I've had Vipre here for about
6 months now and rarely have we needed to reboot our systems since upgrading
to Vipre Enterprise 4.0. Yes, Vipre 3.5 did require reboots on agent
updates, but Vipre 4 has not, in my experience, required a reboot for an
agent update. You don't state which version of Vipre you were testing, but
I'm guessing you tested Vipre 3.5. You may be pleasantly surprised by Vipre
Enterprise 4.

 

John-AldrichTile-Tools

 

From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Wednesday, August 11, 2010 5:54 PM
To: NT System Admin Issues
Subject: Re: Sophos vs. Vipre Enterprise (now that we have tested both)

 

Well done on the evaluation, Jeff.

 

I expect that it will be helpful to many, including Sunbelt.



ASB (My XeeSM Profile) http://xeesm.com/AndrewBaker  
Exploiting Technology for Business Advantage...
 

Signature powered by  http://www.wisestamp.com/email-install WiseStamp 

 

On Wed, Aug 11, 2010 at 4:56 PM, Jeff S. Gottlieb
jeff.s.gottl...@gmail.com wrote:

 

We are in an SMB environment of roughly 60 servers and 1000 hosts, including
Server 2003, 2008, SBS2003, SBS2008, XP Pro SP3, Windows 7, and Vista
workstations. Sophos Endpoint Security along with PureMessaging, and Vipre
Enterprise Premium along with Vipre Email Security are being put to the test
head-to-head.

 

We are staunch fans of Sunbelt Software.  Our experiences with Vipre Email
Security (much improved over Ninja) has been great over the years.  For over
10-years we have placed our trust in Trend Micro, something that has
deteriorated slowly over the past 24-months.  In any event, we are hoping
that our published comparisons will meet objectivity, and help to give
reassurance to future Vipre users regardless of the decisions we ultimately
made.

 

The Sunbelt 'NT System Admin Issues' forum has been a great help, dating
back to April, more specifically.

 

4/01/2010 Subject: Enterprise Anti-Virus, rz...@qwest.net

4/21/2010 Subject: Sophos vs. Vipre Enterprise, jholmg...@xlhealth.com

5/06/2010 Subject: NOD32 Antivirus, jda...@asmail.ucdavis.edu

5/09/2010 Subject: Life just keeps getting better, kurt.b...@gmail.com

7/29/2010 Subject: Vipre effectiveness  false positives,
c.house...@gmail.com

 

1) Installation / Deployment

Server installs both went smooth.  In deployment Sophos had few if any
issues. Viper deployment to server required countless exclusions (painfully
so). in fact when our server crashed, we were told that a few exclusions
were missing (Agh!). Viper deployment to host on two systems came with MANY
surprises. The Vipre agent loaded a NDIS IM element in the TCPIP stack,
causing CISCO (IPSec) clients to connect. oddly not allowing us to remote
TS, Dameware, and other remote applications. SonicWall VPN clients remained
unaffected. Vipre even caused slowness, freezing during printing,
multi-tasking, and issues with Adobe Acrobat. Some of these issues we just
gave up on attempting to resolve and disabled the firewall entirely. When a
MSP firm cannot remote access.this is serious!! We couldn't get support soon
enough. and unfortunately cases remain open 4-5 days after the fact. Vipre
left our accounting department, using a PSA software (ConnectWise), locked
out for an entire day.

 

2) Post Installation

Sophos agent with firewall was documented as utilizing up to 150+ MB of RAM
(enormous). we were told, .the price you pay for good protection.  We were
not comforted, despite this fact the users never complained about slower
speeds.  Vipre utilized a fraction of this, maybe 7 MB. albeit given the
deployment issues (above) we remain unimpressed by any benefit there might
be. Sophos comes along with definitions updated hourly, Vipre (so we are
told) is heading in this direction too. Vipre currently is defaulted to
update every 3-hours, and that default can be changed (.the value??). 

 

3) 24-hour Enterprise support

Vipre Enterprise technicians we found were skilled, sadly they are scantily
available on weekend (evenings).

Sophos Endpoint Security we found were equally skilled and *always*
available.  Despite not having a Premium support agreement, we found
Sophos enthusiastic when it came to remote access (LogMeIn

Re: Sophos vs. Vipre Enterprise (now that we have tested both)

2010-08-12 Thread Eric Wittersheim
Understood, but in my experience an agent update typically has been
considered any upgrade.  I have not had any updates or upgrades to the
agents after migrating to 4 but prior to that I have had to reboot the
agents after updating the agent version.

On Thu, Aug 12, 2010 at 8:08 AM, John Aldrich
jaldr...@blueridgecarpet.comwrote:

  Upgrade =/= update



 During an upgrade from 3.5 to 4, I would expect to need to reboot. However,
 I think you’ll find that after the initial reboot(s) required to install the
 new agent, etc that you won’t have to reboot for updates. At least that’s
 been my experience.



 [image: John-Aldrich][image: Tile-Tools]



 *From:* Eric Wittersheim [mailto:eric.wittersh...@gmail.com]
 *Sent:* Thursday, August 12, 2010 9:03 AM

 *To:* NT System Admin Issues
 *Subject:* Re: Sophos vs. Vipre Enterprise (now that we have tested both)



 I just upgraded from 3 to 4 and all agents required a reboot.
 Additionally, Windows 7 clients and Server 2008 clients required 2 reboots.
 Ugg!

 On Thu, Aug 12, 2010 at 8:00 AM, John Aldrich 
 jaldr...@blueridgecarpet.com wrote:

 Interesting observation on the Agent reboots. I’ve had Vipre here for about
 6 months now and rarely have we needed to reboot our systems since upgrading
 to Vipre Enterprise 4.0. Yes, Vipre 3.5 did require reboots on agent
 updates, but Vipre 4 has not, in my experience, required a reboot for an
 agent update. You don’t state which version of Vipre you were testing, but
 I’m guessing you tested Vipre 3.5. You may be pleasantly surprised by Vipre
 Enterprise 4.



 [image: John-Aldrich][image: Tile-Tools]



 *From:* Andrew S. Baker [mailto:asbz...@gmail.com]
 *Sent:* Wednesday, August 11, 2010 5:54 PM
 *To:* NT System Admin Issues
 *Subject:* Re: Sophos vs. Vipre Enterprise (now that we have tested both)



 Well done on the evaluation, Jeff.



 I expect that it will be helpful to many, including Sunbelt.



 *ASB *(My XeeSM Profile) http://xeesm.com/AndrewBaker
 *Exploiting Technology for Business Advantage...*
 * *

 Signature powered by WiseStamp http://www.wisestamp.com/email-install



 On Wed, Aug 11, 2010 at 4:56 PM, Jeff S. Gottlieb 
 jeff.s.gottl...@gmail.com wrote:



 We are in an SMB environment of roughly 60 servers and 1000 hosts,
 including Server 2003, 2008, SBS2003, SBS2008, XP Pro SP3, Windows 7, and
 Vista workstations. Sophos Endpoint Security along with PureMessaging, and
 Vipre Enterprise Premium along with Vipre Email Security are being put to
 the test head-to-head.



 We are staunch fans of Sunbelt Software.  Our experiences with Vipre Email
 Security (much improved over Ninja) has been great over the years.  For over
 10-years we have placed our trust in Trend Micro, something that has
 deteriorated slowly over the past 24-months.  In any event, we are hoping
 that our published comparisons will meet objectivity, and help to give 
 reassurance
 to future Vipre users regardless of the decisions we ultimately made.



 The Sunbelt *'NT System Admin Issues'* forum has been a great help, dating
 back to April, more specifically…



 4/01/2010 Subject: Enterprise Anti-Virus, rz...@qwest.net

 4/21/2010 Subject: Sophos vs. Vipre Enterprise, jholmg...@xlhealth.com

 5/06/2010 Subject: NOD32 Antivirus, jda...@asmail.ucdavis.edu

 5/09/2010 Subject: Life just keeps getting better, kurt.b...@gmail.com

 7/29/2010 Subject: Vipre effectiveness  false positives,
 c.house...@gmail.com



 *1) Installation / Deployment*

 Server installs both went smooth.  In deployment Sophos had few if any
 issues. Viper deployment to server required countless exclusions (painfully
 so)… in fact when our server crashed, we were told that a few exclusions
 were missing (Agh!). Viper deployment to host on two systems came with MANY
 surprises. The Vipre agent loaded a “NDIS IM” element in the TCPIP stack,
 causing CISCO (IPSec) clients to connect… oddly not allowing us to remote
 TS, Dameware, and other remote applications. SonicWall VPN clients remained
 unaffected. Vipre even caused slowness, freezing during printing,
 multi-tasking, and issues with Adobe Acrobat. Some of these issues we just
 gave up on attempting to resolve and disabled the firewall entirely. When a
 MSP firm cannot remote access…this is serious!! We couldn’t get support soon
 enough… and unfortunately cases remain open 4-5 days after the fact. Vipre
 left our accounting department, using a PSA software (ConnectWise), locked
 out for an entire day.



 *2) Post Installation*

 Sophos agent with firewall was documented as utilizing up to 150+ MB of RAM
 (enormous)… we were told, “…the price you pay for good protection”.  We were
 not comforted, despite this fact the users never complained about slower
 speeds.  Vipre utilized a fraction of this, maybe 7 MB… albeit given the
 deployment issues (above) we remain unimpressed by any benefit there might
 be. Sophos comes along with definitions updated hourly, Vipre (so we are
 told) is heading

Re: Sophos vs. Vipre Enterprise (now that we have tested both)

2010-08-12 Thread Richard Stovall
I installed the beta agent (4.0.3902) on two machines yesterday and rebooted
even though I wasn't prompted.  I'm just used to having to do it.

I thought the goal was to obviate the immediate reboot requirement, but that
in cases where there are updates to one or more of the drivers a restart
will still be necessary at some point to swap out the old drivers for the
new - at least for pre-Vista operating systems.

On Thu, Aug 12, 2010 at 9:02 AM, Eric Wittersheim 
eric.wittersh...@gmail.com wrote:

 I just upgraded from 3 to 4 and all agents required a reboot.
 Additionally, Windows 7 clients and Server 2008 clients required 2 reboots.
 Ugg!


 On Thu, Aug 12, 2010 at 8:00 AM, John Aldrich 
 jaldr...@blueridgecarpet.com wrote:

  Interesting observation on the Agent reboots. I’ve had Vipre here for
 about 6 months now and rarely have we needed to reboot our systems since
 upgrading to Vipre Enterprise 4.0. Yes, Vipre 3.5 did require reboots on
 agent updates, but Vipre 4 has not, in my experience, required a reboot for
 an agent update. You don’t state which version of Vipre you were testing,
 but I’m guessing you tested Vipre 3.5. You may be pleasantly surprised by
 Vipre Enterprise 4.



 [image: John-Aldrich][image: Tile-Tools]



 *From:* Andrew S. Baker [mailto:asbz...@gmail.com]
 *Sent:* Wednesday, August 11, 2010 5:54 PM
 *To:* NT System Admin Issues
 *Subject:* Re: Sophos vs. Vipre Enterprise (now that we have tested both)



 Well done on the evaluation, Jeff.



 I expect that it will be helpful to many, including Sunbelt.



 *ASB *(My XeeSM Profile) http://xeesm.com/AndrewBaker
 *Exploiting Technology for Business Advantage...*
 * *

 Signature powered by WiseStamp http://www.wisestamp.com/email-install



 On Wed, Aug 11, 2010 at 4:56 PM, Jeff S. Gottlieb 
 jeff.s.gottl...@gmail.com wrote:



 We are in an SMB environment of roughly 60 servers and 1000 hosts,
 including Server 2003, 2008, SBS2003, SBS2008, XP Pro SP3, Windows 7, and
 Vista workstations. Sophos Endpoint Security along with PureMessaging, and
 Vipre Enterprise Premium along with Vipre Email Security are being put to
 the test head-to-head.



 We are staunch fans of Sunbelt Software.  Our experiences with Vipre Email
 Security (much improved over Ninja) has been great over the years.  For over
 10-years we have placed our trust in Trend Micro, something that has
 deteriorated slowly over the past 24-months.  In any event, we are hoping
 that our published comparisons will meet objectivity, and help to give 
 reassurance
 to future Vipre users regardless of the decisions we ultimately made.



 The Sunbelt *'NT System Admin Issues'* forum has been a great help,
 dating back to April, more specifically…



 4/01/2010 Subject: Enterprise Anti-Virus, rz...@qwest.net

 4/21/2010 Subject: Sophos vs. Vipre Enterprise, jholmg...@xlhealth.com

 5/06/2010 Subject: NOD32 Antivirus, jda...@asmail.ucdavis.edu

 5/09/2010 Subject: Life just keeps getting better,
 kurt.b...@gmail.com

 7/29/2010 Subject: Vipre effectiveness  false positives,
 c.house...@gmail.com



 *1) Installation / Deployment*

 Server installs both went smooth.  In deployment Sophos had few if any
 issues. Viper deployment to server required countless exclusions (painfully
 so)… in fact when our server crashed, we were told that a few exclusions
 were missing (Agh!). Viper deployment to host on two systems came with MANY
 surprises. The Vipre agent loaded a “NDIS IM” element in the TCPIP stack,
 causing CISCO (IPSec) clients to connect… oddly not allowing us to remote
 TS, Dameware, and other remote applications. SonicWall VPN clients remained
 unaffected. Vipre even caused slowness, freezing during printing,
 multi-tasking, and issues with Adobe Acrobat. Some of these issues we just
 gave up on attempting to resolve and disabled the firewall entirely. When a
 MSP firm cannot remote access…this is serious!! We couldn’t get support soon
 enough… and unfortunately cases remain open 4-5 days after the fact. Vipre
 left our accounting department, using a PSA software (ConnectWise), locked
 out for an entire day.



 *2) Post Installation*

 Sophos agent with firewall was documented as utilizing up to 150+ MB of
 RAM (enormous)… we were told, “…the price you pay for good protection”.  We
 were not comforted, despite this fact the users never complained about
 slower speeds.  Vipre utilized a fraction of this, maybe 7 MB… albeit given
 the deployment issues (above) we remain unimpressed by any benefit there
 might be. Sophos comes along with definitions updated hourly, Vipre (so we
 are told) is heading in this direction too. Vipre currently is defaulted to
 update every 3-hours, and that default can be changed (…the value??).



 *3) 24-hour Enterprise support*

 Vipre Enterprise technicians we found were skilled, sadly they are
 scantily available on weekend (evenings).

 Sophos Endpoint Security we found were equally skilled and **always**
 available.  Despite not having

Re: Sophos vs. Vipre Enterprise (now that we have tested both)

2010-08-12 Thread Tom Miller
Jeff,
 
Thanks for the comments.  I'll add few that some might find helpful:
 
- Vipre deployments here went fairly easily.  I used my own script that
is similar to the original Vipre scripts.  I had to remove SAV and that
was more of an issue than getting Vipre to install.  Removing SAV from
PCs here was like pulling a steak away from a hungry lion..
 
- I see false positives too much, and usually on my Windows 2008
servers, usually on the weekend.  I agree that support is weak on the
weekends.  I submit a request and usually between the long periods of
silence I get an occasional e-mail from support.  By several days later
I'm disgusted with the non-resolution and I realize that the issue is a
false positive and end up closing the tickets.  
 
- I've never had support remote in, although on a few occasions it
would have saved time.  I got the same impression that support didn't
want to do that.  However sometimes support is really fast and the techs
are very knowledgeable.   (None of this Microsoft is the computer
powered on? crap.)
 
- Agreed on the agent updates and reboots.  For us it is an annoyance,
not a show-stopper.
 
- Agreed on the exclusions.  I have a long list of exclusions.  But
that is based on an MS KB I found awhile back and would probably put
those exclusions in any A/V software I used.
 
- I really like how lite Vipre is on active scanning and the daily
scans.  The full scans do tend to bring some PCs here to a crawl,
including mine.   Support told me to schedule those off-hours. 
Hell?  We tell staff to turn off their PCs when not in use to save
electricity.   Not. An. Option. 
 
- In terms of pricing, Sunbelt has been very good to us and I
appreciate it very much.  We are a non-profit/state agency so funds are
always stretched.  Other vendors couldn't even come close.  Or even try.
 For us price is a very important factor.
 
- Updates for remote locations has always been an issue.  I have 20 or
so broadband sites that connect to me via a SOHO device VPN.  You'd
think those PCs would update just fine.  Nope.  Many go to 0 defs, never
get updated, or when the agent uninstalls as part of an agent upgrade,
the new agent never installs or something happens that requires my
team's intervention.  This is a real pain.   And going from version 3 to
4 for these locations was such an issue that we are still dealing with
it. 
 
- I hope Vipre premium will get more advanced.  For now my laptop staff
who work via air card or remote wired/wireless connection don't use
Vipre.  I use Forticlient premium managed by a Fortimanager.  Lots of
security options on the Forticlient!  And I love how my internal content
filtering policies are finally extended to those laptops (we have
Fortinet firewalls so the policies are universal).  Perhaps I'll move to
Vipre premium at some point.
 
- The Console is great and so easy to use.  Super design, Sunbelt. 
Version 4 is better than 3, too.
 
- I wish there were a better way to manage remote WAN site
servers/workstations.  Other products just pick a PC and make that the
update point.  With Vipre it's a hassle and a bit confusing.  
 
I hope this doesn't sound too negative.  I'm sticking with Vipre for
now.   The product is still new compared to other vendors and I see it
improving with each revision.  
 
 
 
 
 
 
Tom Miller
Engineer, Information Technology
Hampton-Newport News Community Services Board
757-788-0528 

 Jeff S. Gottlieb jeff.s.gottl...@gmail.com 8/11/2010 4:56 PM


 
We are in an SMB environment of roughly 60 servers and 1000 hosts,
including Server 2003, 2008, SBS2003, SBS2008, XP Pro SP3, Windows 7,
and Vista workstations. Sophos Endpoint Security along with
PureMessaging, and Vipre Enterprise Premium along with Vipre Email
Security are being put to the test head-to-head.
 
We are staunch fans of Sunbelt Software.  Our experiences with Vipre
Email Security (much improved over Ninja) has been great over the years.
 For over 10-years we have placed our trust in Trend Micro, something
that has deteriorated slowly over the past 24-months.  In any event, we
are hoping that our published comparisons will meet objectivity, and
help to give reassurance to future Vipre users regardless of the
decisions we ultimately made.
 
The Sunbelt 'NT System Admin Issues' forum has been a great help,
dating back to April, more specifically…
 
4/01/2010 Subject: Enterprise Anti-Virus, rz...@qwest.net
4/21/2010 Subject: Sophos vs. Vipre Enterprise, jholmg...@xlhealth.com
5/06/2010 Subject: NOD32 Antivirus, jda...@asmail.ucdavis.edu
5/09/2010 Subject: Life just keeps getting better,
kurt.b...@gmail.com
7/29/2010 Subject: Vipre effectiveness  false positives,
c.house...@gmail.com
 
1) Installation / Deployment
Server installs both went smooth.  In deployment Sophos had few if any
issues. Viper deployment to server required countless exclusions
(painfully so)… in fact when our server crashed, we were told that a few
exclusions were missing (Agh!). Viper 

RE: Sophos vs. Vipre Enterprise (now that we have tested both)

2010-08-12 Thread Steve Kelsay
My showstopper is the ability of Vipre to turn off real time detection without 
warning on a monotonously regular basis. NOTE to Sunbelt: I think the obsolete 
protection I had running yesterday is more secure than the updated protection 
that is not running because you turned it off until I reboot. 

 

From: Tom Miller [mailto:tmil...@hnncsb.org] 
Sent: Thursday, August 12, 2010 9:19 AM
To: NT System Admin Issues
Subject: Re: Sophos vs. Vipre Enterprise (now that we have tested both)

 

Jeff,

 

Thanks for the comments.  I'll add few that some might find helpful:

 

- Vipre deployments here went fairly easily.  I used my own script that is 
similar to the original Vipre scripts.  I had to remove SAV and that was more 
of an issue than getting Vipre to install.  Removing SAV from PCs here was like 
pulling a steak away from a hungry lion..

 

- I see false positives too much, and usually on my Windows 2008 servers, 
usually on the weekend.  I agree that support is weak on the weekends.  I 
submit a request and usually between the long periods of silence I get an 
occasional e-mail from support.  By several days later I'm disgusted with the 
non-resolution and I realize that the issue is a false positive and end up 
closing the tickets.  

 

- I've never had support remote in, although on a few occasions it would have 
saved time.  I got the same impression that support didn't want to do that.  
However sometimes support is really fast and the techs are very knowledgeable.  
 (None of this Microsoft is the computer powered on? crap.)

 

- Agreed on the agent updates and reboots.  For us it is an annoyance, not a 
show-stopper.

 

- Agreed on the exclusions.  I have a long list of exclusions.  But that is 
based on an MS KB I found awhile back and would probably put those exclusions 
in any A/V software I used.

 

- I really like how lite Vipre is on active scanning and the daily scans.  
The full scans do tend to bring some PCs here to a crawl, including mine.   
Support told me to schedule those off-hours.  Hell?  We tell staff to 
turn off their PCs when not in use to save electricity.   Not. An. Option. 

 

- In terms of pricing, Sunbelt has been very good to us and I appreciate it 
very much.  We are a non-profit/state agency so funds are always stretched.  
Other vendors couldn't even come close.  Or even try.  For us price is a very 
important factor.

 

- Updates for remote locations has always been an issue.  I have 20 or so 
broadband sites that connect to me via a SOHO device VPN.  You'd think those 
PCs would update just fine.  Nope.  Many go to 0 defs, never get updated, or 
when the agent uninstalls as part of an agent upgrade, the new agent never 
installs or something happens that requires my team's intervention.  This is a 
real pain.   And going from version 3 to 4 for these locations was such an 
issue that we are still dealing with it. 

 

- I hope Vipre premium will get more advanced.  For now my laptop staff who 
work via air card or remote wired/wireless connection don't use Vipre.  I use 
Forticlient premium managed by a Fortimanager.  Lots of security options on the 
Forticlient!  And I love how my internal content filtering policies are finally 
extended to those laptops (we have Fortinet firewalls so the policies are 
universal).  Perhaps I'll move to Vipre premium at some point.

 

- The Console is great and so easy to use.  Super design, Sunbelt.  Version 4 
is better than 3, too.

 

- I wish there were a better way to manage remote WAN site 
servers/workstations.  Other products just pick a PC and make that the update 
point.  With Vipre it's a hassle and a bit confusing.  

 

I hope this doesn't sound too negative.  I'm sticking with Vipre for now.   The 
product is still new compared to other vendors and I see it improving with each 
revision.  

 

 

 

 

 

 

Tom Miller
Engineer, Information Technology
Hampton-Newport News Community Services Board
757-788-0528 

 Jeff S. Gottlieb jeff.s.gottl...@gmail.com 8/11/2010 4:56 PM 

 

We are in an SMB environment of roughly 60 servers and 1000 hosts, including 
Server 2003, 2008, SBS2003, SBS2008, XP Pro SP3, Windows 7, and Vista 
workstations. Sophos Endpoint Security along with PureMessaging, and Vipre 
Enterprise Premium along with Vipre Email Security are being put to the test 
head-to-head.

 

We are staunch fans of Sunbelt Software.  Our experiences with Vipre Email 
Security (much improved over Ninja) has been great over the years.  For over 
10-years we have placed our trust in Trend Micro, something that has 
deteriorated slowly over the past 24-months.  In any event, we are hoping that 
our published comparisons will meet objectivity, and help to give reassurance 
to future Vipre users regardless of the decisions we ultimately made.

 

The Sunbelt 'NT System Admin Issues' forum has been a great help, dating back 
to April, more specifically…

 

4/01/2010 Subject: Enterprise Anti-Virus, rz

Re: Sophos vs. Vipre Enterprise (now that we have tested both)

2010-08-12 Thread Ben Scott
On Thu, Aug 12, 2010 at 9:53 AM, Steve Kelsay kels...@sctax.org wrote:
 My showstopper is the ability of Vipre to turn off real time detection
 without warning on a monotonously regular basis.

  Can IT admins at least disable the option to turn off real-time
detection entirely?

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~


RE: Sophos vs. Vipre Enterprise (now that we have tested both)

2010-08-12 Thread Jeff S. Gottlieb
Tom,

 

“…pulling a steak away from a hungry lion” Extremely apropos!

 

We had similar experiences removing SAV. When Add Remove Programs failed we 
attempted “rip and remove” and when that failed, we opened a case that climbed 
to their “Development Team”.  Left days unanswered we collectively decided on 
one last call… and if no resolution, reimage! The tech used an impressive 
combination of standalone reinstall /uninstall, and manually manipulation 
(failed for us). He was successful.

 

Note that I never said Sophos was *perfect* …it just allows me to keep more 
valiums in my POCKET!! 

 

BTW. We took the CEO’s laptop (Vista, CISCO VPN, AirCard), using SAV we built a 
2-week long baseline firewall configuration in “Interactive” mode (the firewall 
asks how to deal with traffic).  We then reconfigured to “Block by default” 
(all traffic without matching rules are blocked)… works great! (protection with 
teeth).  The part we really liked was the firewall logs pinpointed the reason 
why RDP (RDC) failed initially… we quickly created a rule and VOILO (Nice!) We 
also found Sophos great at tackling SVI infections. What a relief getting away 
from the Trend Micro bull-jive!

 

Sadly we abandoned the use of Vipre Enterprise (for now). It’s more courageous 
(guys like you) hanging in there, providing feedback that will be beneficial to 
us all in a long run. VIVE LA VIPRE!!   -Jeff

 

From: Tom Miller [mailto:tmil...@hnncsb.org] 
Sent: Thursday, August 12, 2010 6:19 AM
To: NT System Admin Issues
Subject: Re: Sophos vs. Vipre Enterprise (now that we have tested both)

 

Jeff,

 

Thanks for the comments.  I'll add few that some might find helpful:

 

- Vipre deployments here went fairly easily.  I used my own script that is 
similar to the original Vipre scripts.  I had to remove SAV and that was more 
of an issue than getting Vipre to install.  Removing SAV from PCs here was like 
pulling a steak away from a hungry lion..

 

- I see false positives too much, and usually on my Windows 2008 servers, 
usually on the weekend.  I agree that support is weak on the weekends.  I 
submit a request and usually between the long periods of silence I get an 
occasional e-mail from support.  By several days later I'm disgusted with the 
non-resolution and I realize that the issue is a false positive and end up 
closing the tickets.  

 

- I've never had support remote in, although on a few occasions it would have 
saved time.  I got the same impression that support didn't want to do that.  
However sometimes support is really fast and the techs are very knowledgeable.  
 (None of this Microsoft is the computer powered on? crap.)

 

- Agreed on the agent updates and reboots.  For us it is an annoyance, not a 
show-stopper.

 

- Agreed on the exclusions.  I have a long list of exclusions.  But that is 
based on an MS KB I found awhile back and would probably put those exclusions 
in any A/V software I used.

 

- I really like how lite Vipre is on active scanning and the daily scans.  
The full scans do tend to bring some PCs here to a crawl, including mine.   
Support told me to schedule those off-hours.  Hell?  We tell staff to 
turn off their PCs when not in use to save electricity.   Not. An. Option. 

 

- In terms of pricing, Sunbelt has been very good to us and I appreciate it 
very much.  We are a non-profit/state agency so funds are always stretched.  
Other vendors couldn't even come close.  Or even try.  For us price is a very 
important factor.

 

- Updates for remote locations has always been an issue.  I have 20 or so 
broadband sites that connect to me via a SOHO device VPN.  You'd think those 
PCs would update just fine.  Nope.  Many go to 0 defs, never get updated, or 
when the agent uninstalls as part of an agent upgrade, the new agent never 
installs or something happens that requires my team's intervention.  This is a 
real pain.   And going from version 3 to 4 for these locations was such an 
issue that we are still dealing with it. 

 

- I hope Vipre premium will get more advanced.  For now my laptop staff who 
work via air card or remote wired/wireless connection don't use Vipre.  I use 
Forticlient premium managed by a Fortimanager.  Lots of security options on the 
Forticlient!  And I love how my internal content filtering policies are finally 
extended to those laptops (we have Fortinet firewalls so the policies are 
universal).  Perhaps I'll move to Vipre premium at some point.

 

- The Console is great and so easy to use.  Super design, Sunbelt.  Version 4 
is better than 3, too.

 

- I wish there were a better way to manage remote WAN site 
servers/workstations.  Other products just pick a PC and make that the update 
point.  With Vipre it's a hassle and a bit confusing.  

 

I hope this doesn't sound too negative.  I'm sticking with Vipre for now.   The 
product is still new compared to other vendors and I see it improving with each 
revision

RE: Sophos vs. Vipre Enterprise (now that we have tested both)

2010-08-12 Thread Evan Brastow
Agreed. Excellent evaluation.

I had been looking for something to replace VIPRE and may give Sophos a try.



From: Andrew S. Baker [mailto:asbz...@gmail.com]
Sent: Wednesday, August 11, 2010 5:54 PM
To: NT System Admin Issues
Subject: Re: Sophos vs. Vipre Enterprise (now that we have tested both)

Well done on the evaluation, Jeff.

I expect that it will be helpful to many, including Sunbelt.


ASB (My XeeSM Profile)http://XeeSM.com/AndrewBaker
Exploiting Technology for Business Advantage...

Signature powered by WiseStamphttp://www.wisestamp.com/email-install

On Wed, Aug 11, 2010 at 4:56 PM, Jeff S. Gottlieb 
jeff.s.gottl...@gmail.commailto:jeff.s.gottl...@gmail.com wrote:

We are in an SMB environment of roughly 60 servers and 1000 hosts, including 
Server 2003, 2008, SBS2003, SBS2008, XP Pro SP3, Windows 7, and Vista 
workstations. Sophos Endpoint Security along with PureMessaging, and Vipre 
Enterprise Premium along with Vipre Email Security are being put to the test 
head-to-head.

We are staunch fans of Sunbelt Software.  Our experiences with Vipre Email 
Security (much improved over Ninja) has been great over the years.  For over 
10-years we have placed our trust in Trend Micro, something that has 
deteriorated slowly over the past 24-months.  In any event, we are hoping that 
our published comparisons will meet objectivity, and help to give reassurance 
to future Vipre users regardless of the decisions we ultimately made.

The Sunbelt 'NT System Admin Issues' forum has been a great help, dating back 
to April, more specifically...

4/01/2010 Subject: Enterprise Anti-Virus, 
rz...@qwest.netmailto:rz...@qwest.net
4/21/2010 Subject: Sophos vs. Vipre Enterprise, 
jholmg...@xlhealth.commailto:jholmg...@xlhealth.com
5/06/2010 Subject: NOD32 Antivirus, 
jda...@asmail.ucdavis.edumailto:jda...@asmail.ucdavis.edu
5/09/2010 Subject: Life just keeps getting better, 
kurt.b...@gmail.commailto:kurt.b...@gmail.com
7/29/2010 Subject: Vipre effectiveness  false positives, 
c.house...@gmail.commailto:c.house...@gmail.com

1) Installation / Deployment
Server installs both went smooth.  In deployment Sophos had few if any issues. 
Viper deployment to server required countless exclusions (painfully so)... in 
fact when our server crashed, we were told that a few exclusions were missing 
(Agh!). Viper deployment to host on two systems came with MANY surprises. The 
Vipre agent loaded a NDIS IM element in the TCPIP stack, causing CISCO 
(IPSec) clients to connect... oddly not allowing us to remote TS, Dameware, and 
other remote applications. SonicWall VPN clients remained unaffected. Vipre 
even caused slowness, freezing during printing, multi-tasking, and issues with 
Adobe Acrobat. Some of these issues we just gave up on attempting to resolve 
and disabled the firewall entirely. When a MSP firm cannot remote access...this 
is serious!! We couldn't get support soon enough... and unfortunately cases 
remain open 4-5 days after the fact. Vipre left our accounting department, 
using a PSA software (ConnectWise), locked out for an entire day.

2) Post Installation
Sophos agent with firewall was documented as utilizing up to 150+ MB of RAM 
(enormous)... we were told, ...the price you pay for good protection.  We 
were not comforted, despite this fact the users never complained about slower 
speeds.  Vipre utilized a fraction of this, maybe 7 MB... albeit given the 
deployment issues (above) we remain unimpressed by any benefit there might be. 
Sophos comes along with definitions updated hourly, Vipre (so we are told) is 
heading in this direction too. Vipre currently is defaulted to update every 
3-hours, and that default can be changed (...the value??).

3) 24-hour Enterprise support
Vipre Enterprise technicians we found were skilled, sadly they are scantily 
available on weekend (evenings).
Sophos Endpoint Security we found were equally skilled and *always* available.  
Despite not having a Premium support agreement, we found Sophos enthusiastic 
when it came to remote access (LogMeIn). If (in the rare occasion) Vipre was 
asked to remote, remote was either unavailable or they were flat out reluctant. 
Vipre on several occasions seemed overwhelmed... Sophos *never* gave us that 
feeling.

4) Additional Items
Sophos PureMessaging (SPAM filter) catches SPAM well (notice we didn't say 
unsolicited advertisements). If you differentiate (most do) between the two you 
will NOT enjoy PureMessaging. Additionally with PureMessaging each account 
receives email called spam digest, there are options to either Delete or 
Deliver.  In either event chosen, this is a singular event... it does NOT 
automatically allow or block these addresses on a going forward basis. It's 
impossible meeting the demands of users wanting NOT to receive Golf Digest 
solicitations, eBay, Amazon, LL Bean, Victoria Secrets (no joke!), all that 
legitimate stuff that gets overwhelming. Ah... then there's Vipre Email 
Security!!!  If *anything

Re: Sophos vs. Vipre Enterprise (now that we have tested both)

2010-08-12 Thread justino garcia
I guess version 4.0 does not require a reboot for agent on updates. 3.5 did.
I wish it was more geared towards hosting, or a hosted console.
We manage 12 small comapnies, and 2 bigs ones. I would like for it be a
hosted service, more so then it is now.
SO if I can a call for malware problem, I can logon to console and check
vipre, even run a scan check if it up to date, but all in one CONSOLE
/server. Maybe a web interface. Also since I see that vipre works with
malware bytes, maybe adding feature so you can scan via malwarebytes, from a
remote console.

Overall vipre been good, and I think we will stick wih it, it has good
detection rate, and so far thier higher end tech support seemed to be good.


Does Sophos offer a hosting / hosted service version???

On Thu, Aug 12, 2010 at 1:59 PM, Evan Brastow
ebras...@automatedemblem.comwrote:

  Agreed. Excellent evaluation.



 I had been looking for something to replace VIPRE and may give Sophos a
 try.







 *From:* Andrew S. Baker [mailto:asbz...@gmail.com]
 *Sent:* Wednesday, August 11, 2010 5:54 PM
 *To:* NT System Admin Issues
 *Subject:* Re: Sophos vs. Vipre Enterprise (now that we have tested both)



 Well done on the evaluation, Jeff.



 I expect that it will be helpful to many, including Sunbelt.



 *ASB *(My XeeSM Profile) http://XeeSM.com/AndrewBaker
 *Exploiting Technology for Business Advantage...*
 * *

 Signature powered by WiseStamp http://www.wisestamp.com/email-install



 On Wed, Aug 11, 2010 at 4:56 PM, Jeff S. Gottlieb 
 jeff.s.gottl...@gmail.com wrote:



 We are in an SMB environment of roughly 60 servers and 1000 hosts,
 including Server 2003, 2008, SBS2003, SBS2008, XP Pro SP3, Windows 7, and
 Vista workstations. Sophos Endpoint Security along with PureMessaging, and
 Vipre Enterprise Premium along with Vipre Email Security are being put to
 the test head-to-head.



 We are staunch fans of Sunbelt Software.  Our experiences with Vipre Email
 Security (much improved over Ninja) has been great over the years.  For over
 10-years we have placed our trust in Trend Micro, something that has
 deteriorated slowly over the past 24-months.  In any event, we are hoping
 that our published comparisons will meet objectivity, and help to give 
 reassurance
 to future Vipre users regardless of the decisions we ultimately made.



 The Sunbelt *'NT System Admin Issues'* forum has been a great help, dating
 back to April, more specifically…



 4/01/2010 Subject: Enterprise Anti-Virus, rz...@qwest.net

 4/21/2010 Subject: Sophos vs. Vipre Enterprise, jholmg...@xlhealth.com

 5/06/2010 Subject: NOD32 Antivirus, jda...@asmail.ucdavis.edu

 5/09/2010 Subject: Life just keeps getting better, kurt.b...@gmail.com

 7/29/2010 Subject: Vipre effectiveness  false positives,
 c.house...@gmail.com



 *1) Installation / Deployment*

 Server installs both went smooth.  In deployment Sophos had few if any
 issues. Viper deployment to server required countless exclusions (painfully
 so)… in fact when our server crashed, we were told that a few exclusions
 were missing (Agh!). Viper deployment to host on two systems came with MANY
 surprises. The Vipre agent loaded a “NDIS IM” element in the TCPIP stack,
 causing CISCO (IPSec) clients to connect… oddly not allowing us to remote
 TS, Dameware, and other remote applications. SonicWall VPN clients remained
 unaffected. Vipre even caused slowness, freezing during printing,
 multi-tasking, and issues with Adobe Acrobat. Some of these issues we just
 gave up on attempting to resolve and disabled the firewall entirely. When a
 MSP firm cannot remote access…this is serious!! We couldn’t get support soon
 enough… and unfortunately cases remain open 4-5 days after the fact. Vipre
 left our accounting department, using a PSA software (ConnectWise), locked
 out for an entire day.



 *2) Post Installation*

 Sophos agent with firewall was documented as utilizing up to 150+ MB of RAM
 (enormous)… we were told, “…the price you pay for good protection”.  We were
 not comforted, despite this fact the users never complained about slower
 speeds.  Vipre utilized a fraction of this, maybe 7 MB… albeit given the
 deployment issues (above) we remain unimpressed by any benefit there might
 be. Sophos comes along with definitions updated hourly, Vipre (so we are
 told) is heading in this direction too. Vipre currently is defaulted to
 update every 3-hours, and that default can be changed (…the value??).



 *3) 24-hour Enterprise support*

 Vipre Enterprise technicians we found were skilled, sadly they are scantily
 available on weekend (evenings).

 Sophos Endpoint Security we found were equally skilled and **always**
 available.  Despite not having a “Premium” support agreement, we found
 Sophos enthusiastic when it came to remote access (LogMeIn). If (in the rare
 occasion) Vipre was asked to remote, remote was either unavailable or they
 were flat out reluctant. Vipre on several occasions seemed overwhelmed…
 Sophos **never

Re: Sophos vs. Vipre Enterprise (now that we have tested both)

2010-08-12 Thread Roger Wright
Version 4's console is designed to be more MSP-friendly with multiple sites
(companies) managed from the same console.  You could even have client
machines with the same needs in different sites now.


Roger Wright
___

When it's GOOD there ain't nothin' like it, and when it's BAD there ain't
nothin' like it!




On Thu, Aug 12, 2010 at 2:21 PM, justino garcia jgarciaitl...@gmail.comwrote:

 I guess version 4.0 does not require a reboot for agent on updates. 3.5
 did.
 I wish it was more geared towards hosting, or a hosted console.
 We manage 12 small comapnies, and 2 bigs ones. I would like for it be a
 hosted service, more so then it is now.
 SO if I can a call for malware problem, I can logon to console and check
 vipre, even run a scan check if it up to date, but all in one CONSOLE
 /server. Maybe a web interface. Also since I see that vipre works with
 malware bytes, maybe adding feature so you can scan via malwarebytes, from a
 remote console.

 Overall vipre been good, and I think we will stick wih it, it has good
 detection rate, and so far thier higher end tech support seemed to be good.


 Does Sophos offer a hosting / hosted service version???


 On Thu, Aug 12, 2010 at 1:59 PM, Evan Brastow 
 ebras...@automatedemblem.com wrote:

  Agreed. Excellent evaluation.



 I had been looking for something to replace VIPRE and may give Sophos a
 try.







 *From:* Andrew S. Baker [mailto:asbz...@gmail.com]
 *Sent:* Wednesday, August 11, 2010 5:54 PM
 *To:* NT System Admin Issues
 *Subject:* Re: Sophos vs. Vipre Enterprise (now that we have tested both)



 Well done on the evaluation, Jeff.



 I expect that it will be helpful to many, including Sunbelt.



 *ASB *(My XeeSM Profile) http://XeeSM.com/AndrewBaker
 *Exploiting Technology for Business Advantage...*
 * *

 Signature powered by WiseStamp http://www.wisestamp.com/email-install



 On Wed, Aug 11, 2010 at 4:56 PM, Jeff S. Gottlieb 
 jeff.s.gottl...@gmail.com wrote:



 We are in an SMB environment of roughly 60 servers and 1000 hosts,
 including Server 2003, 2008, SBS2003, SBS2008, XP Pro SP3, Windows 7, and
 Vista workstations. Sophos Endpoint Security along with PureMessaging, and
 Vipre Enterprise Premium along with Vipre Email Security are being put to
 the test head-to-head.



 We are staunch fans of Sunbelt Software.  Our experiences with Vipre Email
 Security (much improved over Ninja) has been great over the years.  For over
 10-years we have placed our trust in Trend Micro, something that has
 deteriorated slowly over the past 24-months.  In any event, we are hoping
 that our published comparisons will meet objectivity, and help to give 
 reassurance
 to future Vipre users regardless of the decisions we ultimately made.



 The Sunbelt *'NT System Admin Issues'* forum has been a great help,
 dating back to April, more specifically…



 4/01/2010 Subject: Enterprise Anti-Virus, rz...@qwest.net

 4/21/2010 Subject: Sophos vs. Vipre Enterprise, jholmg...@xlhealth.com

 5/06/2010 Subject: NOD32 Antivirus, jda...@asmail.ucdavis.edu

 5/09/2010 Subject: Life just keeps getting better,
 kurt.b...@gmail.com

 7/29/2010 Subject: Vipre effectiveness  false positives,
 c.house...@gmail.com



 *1) Installation / Deployment*

 Server installs both went smooth.  In deployment Sophos had few if any
 issues. Viper deployment to server required countless exclusions (painfully
 so)… in fact when our server crashed, we were told that a few exclusions
 were missing (Agh!). Viper deployment to host on two systems came with MANY
 surprises. The Vipre agent loaded a “NDIS IM” element in the TCPIP stack,
 causing CISCO (IPSec) clients to connect… oddly not allowing us to remote
 TS, Dameware, and other remote applications. SonicWall VPN clients remained
 unaffected. Vipre even caused slowness, freezing during printing,
 multi-tasking, and issues with Adobe Acrobat. Some of these issues we just
 gave up on attempting to resolve and disabled the firewall entirely. When a
 MSP firm cannot remote access…this is serious!! We couldn’t get support soon
 enough… and unfortunately cases remain open 4-5 days after the fact. Vipre
 left our accounting department, using a PSA software (ConnectWise), locked
 out for an entire day.



 *2) Post Installation*

 Sophos agent with firewall was documented as utilizing up to 150+ MB of
 RAM (enormous)… we were told, “…the price you pay for good protection”.  We
 were not comforted, despite this fact the users never complained about
 slower speeds.  Vipre utilized a fraction of this, maybe 7 MB… albeit given
 the deployment issues (above) we remain unimpressed by any benefit there
 might be. Sophos comes along with definitions updated hourly, Vipre (so we
 are told) is heading in this direction too. Vipre currently is defaulted to
 update every 3-hours, and that default can be changed (…the value??).



 *3) 24-hour Enterprise support*

 Vipre Enterprise technicians we found were skilled, sadly they are
 scantily

Re: Sophos vs. Vipre Enterprise (now that we have tested both)

2010-08-12 Thread justino garcia
how I never understood how.

This is what  I have 2003 server; Vipre 4.0.
We had two clients (two different offices, and clients).
We wanted to include in that same server, the one client with vipre perium
to be managed int he same console as our other client with viper enterprise.
We could, so I created a VM machine on that same box just for vipre premium.


Know we would like to add other just enterprise version of vipre to that
same console, (i.e. other sites, to this console) so we can manage from this
console. And just add update consolse at their offices. ( we did get the
update server setup for enteprrise at the one office), and the vipre console
ont he server to work that worked fine.

But WE want to do MSP.

ALso I had a hard time, to understand how I can install vipre console on my
laptop, just so I can remote and manage the machines, I don't want to be a
policy server just management, like scan or change settings.


Any idea?

On Thu, Aug 12, 2010 at 2:33 PM, Roger Wright rhw...@gmail.com wrote:

 Version 4's console is designed to be more MSP-friendly with multiple sites
 (companies) managed from the same console.  You could even have client
 machines with the same needs in different sites now.


 Roger Wright
 ___

 When it's GOOD there ain't nothin' like it, and when it's BAD there ain't
 nothin' like it!





 On Thu, Aug 12, 2010 at 2:21 PM, justino garcia 
 jgarciaitl...@gmail.comwrote:

 I guess version 4.0 does not require a reboot for agent on updates. 3.5
 did.
 I wish it was more geared towards hosting, or a hosted console.
 We manage 12 small comapnies, and 2 bigs ones. I would like for it be a
 hosted service, more so then it is now.
 SO if I can a call for malware problem, I can logon to console and check
 vipre, even run a scan check if it up to date, but all in one CONSOLE
 /server. Maybe a web interface. Also since I see that vipre works with
 malware bytes, maybe adding feature so you can scan via malwarebytes, from a
 remote console.

 Overall vipre been good, and I think we will stick wih it, it has good
 detection rate, and so far thier higher end tech support seemed to be good.


 Does Sophos offer a hosting / hosted service version???


 On Thu, Aug 12, 2010 at 1:59 PM, Evan Brastow 
 ebras...@automatedemblem.com wrote:

  Agreed. Excellent evaluation.



 I had been looking for something to replace VIPRE and may give Sophos a
 try.







 *From:* Andrew S. Baker [mailto:asbz...@gmail.com]
 *Sent:* Wednesday, August 11, 2010 5:54 PM
 *To:* NT System Admin Issues
 *Subject:* Re: Sophos vs. Vipre Enterprise (now that we have tested
 both)



 Well done on the evaluation, Jeff.



 I expect that it will be helpful to many, including Sunbelt.



 *ASB *(My XeeSM Profile) http://XeeSM.com/AndrewBaker
 *Exploiting Technology for Business Advantage...*
 * *

 Signature powered by WiseStamp http://www.wisestamp.com/email-install



 On Wed, Aug 11, 2010 at 4:56 PM, Jeff S. Gottlieb 
 jeff.s.gottl...@gmail.com wrote:



 We are in an SMB environment of roughly 60 servers and 1000 hosts,
 including Server 2003, 2008, SBS2003, SBS2008, XP Pro SP3, Windows 7, and
 Vista workstations. Sophos Endpoint Security along with PureMessaging, and
 Vipre Enterprise Premium along with Vipre Email Security are being put to
 the test head-to-head.



 We are staunch fans of Sunbelt Software.  Our experiences with Vipre
 Email Security (much improved over Ninja) has been great over the years.
 For over 10-years we have placed our trust in Trend Micro, something that
 has deteriorated slowly over the past 24-months.  In any event, we are
 hoping that our published comparisons will meet objectivity, and help to
 give reassurance to future Vipre users regardless of the decisions we
 ultimately made.



 The Sunbelt *'NT System Admin Issues'* forum has been a great help,
 dating back to April, more specifically…



 4/01/2010 Subject: Enterprise Anti-Virus, rz...@qwest.net

 4/21/2010 Subject: Sophos vs. Vipre Enterprise, jholmg...@xlhealth.com

 5/06/2010 Subject: NOD32 Antivirus, jda...@asmail.ucdavis.edu

 5/09/2010 Subject: Life just keeps getting better,
 kurt.b...@gmail.com

 7/29/2010 Subject: Vipre effectiveness  false positives,
 c.house...@gmail.com



 *1) Installation / Deployment*

 Server installs both went smooth.  In deployment Sophos had few if any
 issues. Viper deployment to server required countless exclusions (painfully
 so)… in fact when our server crashed, we were told that a few exclusions
 were missing (Agh!). Viper deployment to host on two systems came with MANY
 surprises. The Vipre agent loaded a “NDIS IM” element in the TCPIP stack,
 causing CISCO (IPSec) clients to connect… oddly not allowing us to remote
 TS, Dameware, and other remote applications. SonicWall VPN clients remained
 unaffected. Vipre even caused slowness, freezing during printing,
 multi-tasking, and issues with Adobe Acrobat. Some of these issues we just
 gave up on attempting to resolve

Re: Sophos vs. Vipre Enterprise (now that we have tested both)

2010-08-12 Thread Angus Scott-Fleming
On 12 Aug 2010 at 10:11, John Aldrich  wrote:

 Yes. It's customizable in the admin console.

You can, however, bypass it if you have local admin rights by stopping the 
Agent service.

--
Angus Scott-Fleming
GeoApps, Tucson, Arizona
1-520-290-5038
Security Blog: http://geoapps.com/





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~


Re: Sophos vs. Vipre Enterprise (now that we have tested both)

2010-08-11 Thread Andrew S. Baker
Well done on the evaluation, Jeff.

I expect that it will be helpful to many, including Sunbelt.



*ASB *(My XeeSM Profile) http://XeeSM.com/AndrewBaker
*Exploiting Technology for Business Advantage...*
* *
Signature powered by WiseStamp http://www.wisestamp.com/email-install


On Wed, Aug 11, 2010 at 4:56 PM, Jeff S. Gottlieb jeff.s.gottl...@gmail.com
 wrote:



 We are in an SMB environment of roughly 60 servers and 1000 hosts,
 including Server 2003, 2008, SBS2003, SBS2008, XP Pro SP3, Windows 7, and
 Vista workstations. Sophos Endpoint Security along with PureMessaging, and
 Vipre Enterprise Premium along with Vipre Email Security are being put to
 the test head-to-head.



 We are staunch fans of Sunbelt Software.  Our experiences with Vipre Email
 Security (much improved over Ninja) has been great over the years.  For over
 10-years we have placed our trust in Trend Micro, something that has
 deteriorated slowly over the past 24-months.  In any event, we are hoping
 that our published comparisons will meet objectivity, and help to give 
 reassurance
 to future Vipre users regardless of the decisions we ultimately made.



 The Sunbelt *'NT System Admin Issues'* forum has been a great help, dating
 back to April, more specifically…



 4/01/2010 Subject: Enterprise Anti-Virus, rz...@qwest.net

 4/21/2010 Subject: Sophos vs. Vipre Enterprise, jholmg...@xlhealth.com

 5/06/2010 Subject: NOD32 Antivirus, jda...@asmail.ucdavis.edu

 5/09/2010 Subject: Life just keeps getting better, kurt.b...@gmail.com

 7/29/2010 Subject: Vipre effectiveness  false positives,
 c.house...@gmail.com



 *1) Installation / Deployment*

 Server installs both went smooth.  In deployment Sophos had few if any
 issues. Viper deployment to server required countless exclusions (painfully
 so)… in fact when our server crashed, we were told that a few exclusions
 were missing (Agh!). Viper deployment to host on two systems came with MANY
 surprises. The Vipre agent loaded a “NDIS IM” element in the TCPIP stack,
 causing CISCO (IPSec) clients to connect… oddly not allowing us to remote
 TS, Dameware, and other remote applications. SonicWall VPN clients remained
 unaffected. Vipre even caused slowness, freezing during printing,
 multi-tasking, and issues with Adobe Acrobat. Some of these issues we just
 gave up on attempting to resolve and disabled the firewall entirely. When a
 MSP firm cannot remote access…this is serious!! We couldn’t get support soon
 enough… and unfortunately cases remain open 4-5 days after the fact. Vipre
 left our accounting department, using a PSA software (ConnectWise), locked
 out for an entire day.



 *2) Post Installation*

 Sophos agent with firewall was documented as utilizing up to 150+ MB of RAM
 (enormous)… we were told, “…the price you pay for good protection”.  We were
 not comforted, despite this fact the users never complained about slower
 speeds.  Vipre utilized a fraction of this, maybe 7 MB… albeit given the
 deployment issues (above) we remain unimpressed by any benefit there might
 be. Sophos comes along with definitions updated hourly, Vipre (so we are
 told) is heading in this direction too. Vipre currently is defaulted to
 update every 3-hours, and that default can be changed (…the value??).



 *3) 24-hour Enterprise support*

 Vipre Enterprise technicians we found were skilled, sadly they are scantily
 available on weekend (evenings).

 Sophos Endpoint Security we found were equally skilled and **always**
 available.  Despite not having a “Premium” support agreement, we found
 Sophos enthusiastic when it came to remote access (LogMeIn). If (in the rare
 occasion) Vipre was asked to remote, remote was either unavailable or they
 were flat out reluctant. Vipre on several occasions seemed overwhelmed…
 Sophos **never** gave us that feeling.



 *4) Additional Items*

 Sophos PureMessaging (SPAM filter) catches SPAM well (notice we didn’t say
 unsolicited advertisements). If you differentiate (most do) between the two
 you will *NOT* enjoy PureMessaging. Additionally with PureMessaging each
 account receives email called “spam digest”, there are options to either
 Delete or Deliver.  In either event chosen, this is a singular event… it
 does NOT automatically allow or block these addresses on a going forward
 basis. It’s impossible meeting the demands of users wanting NOT to receive
 Golf Digest solicitations, eBay, Amazon, LL Bean, Victoria Secrets (no
 joke!), all that legitimate stuff that gets overwhelming. Ah… then there’s
 Vipre Email Security!!!  If **anything** unwanted makes it to the Inbox (a
 rare occasion), the individual users can manage without support.  More
 systems like this create nearly passive income for us.



 Vipre has agent (not definition) updates. These agent updates *require
 reboots*… can you imagine 200 users rebooting their workstations for
 updates?? We cannot, and furthermore in the 6 long weeks we have been in
 proof-of-concept, Sophos has never 

RE: Sophos vs. Vipre Enterprise (now that we have tested both)

2010-08-11 Thread Raper, Jonathan - Eagle
+100

If only more of us had the luxury of being able to be as diligent as you have 
been, Jeff.

Sadly, we had to turn down Vipre as well earlier this year. We ended up going 
with Trend Micro, and we've been pleased thus far (we moved away from 
McCrapfee, so really anything would be better). We didn't consider Sophos, as 
we really didn't have time to look at more than a couple of options.

We've been running GFI MailEssentials for YEARS, and haven't looked back. GFI 
is a great company to work with, and their spam filtering application is solid. 
It will be truly interesting to see what the Sunbelt/GFI merger/acquisition 
will bring to the table for people like us.


Jonathan L. Raper, A+, MCSA, MCSE
Technology Coordinator
Eagle Physicians  Associates, PA
jra...@eaglemds.comBLOCKED::mailto:%20jra...@eaglemds.com
www.eaglemds.comBLOCKED::http://www.eaglemds.com/


From: Andrew S. Baker [mailto:asbz...@gmail.com]
Sent: Wednesday, August 11, 2010 5:54 PM
To: NT System Admin Issues
Subject: Re: Sophos vs. Vipre Enterprise (now that we have tested both)

Well done on the evaluation, Jeff.

I expect that it will be helpful to many, including Sunbelt.


ASB (My XeeSM Profile)http://XeeSM.com/AndrewBaker
Exploiting Technology for Business Advantage...

Signature powered by WiseStamphttp://www.wisestamp.com/email-install

On Wed, Aug 11, 2010 at 4:56 PM, Jeff S. Gottlieb 
jeff.s.gottl...@gmail.commailto:jeff.s.gottl...@gmail.com wrote:

We are in an SMB environment of roughly 60 servers and 1000 hosts, including 
Server 2003, 2008, SBS2003, SBS2008, XP Pro SP3, Windows 7, and Vista 
workstations. Sophos Endpoint Security along with PureMessaging, and Vipre 
Enterprise Premium along with Vipre Email Security are being put to the test 
head-to-head.

We are staunch fans of Sunbelt Software.  Our experiences with Vipre Email 
Security (much improved over Ninja) has been great over the years.  For over 
10-years we have placed our trust in Trend Micro, something that has 
deteriorated slowly over the past 24-months.  In any event, we are hoping that 
our published comparisons will meet objectivity, and help to give reassurance 
to future Vipre users regardless of the decisions we ultimately made.

The Sunbelt 'NT System Admin Issues' forum has been a great help, dating back 
to April, more specifically...

4/01/2010 Subject: Enterprise Anti-Virus, 
rz...@qwest.netmailto:rz...@qwest.net
4/21/2010 Subject: Sophos vs. Vipre Enterprise, 
jholmg...@xlhealth.commailto:jholmg...@xlhealth.com
5/06/2010 Subject: NOD32 Antivirus, 
jda...@asmail.ucdavis.edumailto:jda...@asmail.ucdavis.edu
5/09/2010 Subject: Life just keeps getting better, 
kurt.b...@gmail.commailto:kurt.b...@gmail.com
7/29/2010 Subject: Vipre effectiveness  false positives, 
c.house...@gmail.commailto:c.house...@gmail.com

1) Installation / Deployment
Server installs both went smooth.  In deployment Sophos had few if any issues. 
Viper deployment to server required countless exclusions (painfully so)... in 
fact when our server crashed, we were told that a few exclusions were missing 
(Agh!). Viper deployment to host on two systems came with MANY surprises. The 
Vipre agent loaded a NDIS IM element in the TCPIP stack, causing CISCO 
(IPSec) clients to connect... oddly not allowing us to remote TS, Dameware, and 
other remote applications. SonicWall VPN clients remained unaffected. Vipre 
even caused slowness, freezing during printing, multi-tasking, and issues with 
Adobe Acrobat. Some of these issues we just gave up on attempting to resolve 
and disabled the firewall entirely. When a MSP firm cannot remote access...this 
is serious!! We couldn't get support soon enough... and unfortunately cases 
remain open 4-5 days after the fact. Vipre left our accounting department, 
using a PSA software (ConnectWise), locked out for an entire day.

2) Post Installation
Sophos agent with firewall was documented as utilizing up to 150+ MB of RAM 
(enormous)... we were told, ...the price you pay for good protection.  We 
were not comforted, despite this fact the users never complained about slower 
speeds.  Vipre utilized a fraction of this, maybe 7 MB... albeit given the 
deployment issues (above) we remain unimpressed by any benefit there might be. 
Sophos comes along with definitions updated hourly, Vipre (so we are told) is 
heading in this direction too. Vipre currently is defaulted to update every 
3-hours, and that default can be changed (...the value??).

3) 24-hour Enterprise support
Vipre Enterprise technicians we found were skilled, sadly they are scantily 
available on weekend (evenings).
Sophos Endpoint Security we found were equally skilled and *always* available.  
Despite not having a Premium support agreement, we found Sophos enthusiastic 
when it came to remote access (LogMeIn). If (in the rare occasion) Vipre was 
asked to remote, remote was either unavailable or they were flat out reluctant. 
Vipre on several

Re: Sophos vs. Vipre Enterprise (now that we have tested both)

2010-08-11 Thread Jon Harris
Sarcasm on/*

Anything?  You actually think Symantec is better or the same?

/* Sarcasm off

Jon

On Wed, Aug 11, 2010 at 6:13 PM, Raper, Jonathan - Eagle 
jra...@eaglemds.com wrote:

  +100



 If only more of us had the luxury of being able to be as diligent as you
 have been, Jeff.



 Sadly, we had to turn down Vipre as well earlier this year. We ended up
 going with Trend Micro, and we’ve been pleased thus far (we moved away from
 McCrapfee, so really anything would be better). We didn’t consider Sophos,
 as we really didn’t have time to look at more than a couple of options.



 We’ve been running GFI MailEssentials for YEARS, and haven’t looked back.
 GFI is a great company to work with, and their spam filtering application is
 solid. It will be truly interesting to see what the Sunbelt/GFI
 merger/acquisition will bring to the table for people like us.



 Jonathan L. Raper, A+, MCSA, MCSE
 Technology Coordinator
 Eagle Physicians  Associates, PA*
 *jra...@eaglemds.com*
 *www.eaglemds.com
  --

 *From:* Andrew S. Baker [mailto:asbz...@gmail.com]
 *Sent:* Wednesday, August 11, 2010 5:54 PM
 *To:* NT System Admin Issues
 *Subject:* Re: Sophos vs. Vipre Enterprise (now that we have tested both)



 Well done on the evaluation, Jeff.



 I expect that it will be helpful to many, including Sunbelt.



 *ASB *(My XeeSM Profile) http://xeesm.com/AndrewBaker
 *Exploiting Technology for Business Advantage...*
 * *

 Signature powered by WiseStamp http://www.wisestamp.com/email-install



 On Wed, Aug 11, 2010 at 4:56 PM, Jeff S. Gottlieb 
 jeff.s.gottl...@gmail.com wrote:



 We are in an SMB environment of roughly 60 servers and 1000 hosts,
 including Server 2003, 2008, SBS2003, SBS2008, XP Pro SP3, Windows 7, and
 Vista workstations. Sophos Endpoint Security along with PureMessaging, and
 Vipre Enterprise Premium along with Vipre Email Security are being put to
 the test head-to-head.



 We are staunch fans of Sunbelt Software.  Our experiences with Vipre Email
 Security (much improved over Ninja) has been great over the years.  For over
 10-years we have placed our trust in Trend Micro, something that has
 deteriorated slowly over the past 24-months.  In any event, we are hoping
 that our published comparisons will meet objectivity, and help to give 
 reassurance
 to future Vipre users regardless of the decisions we ultimately made.



 The Sunbelt *'NT System Admin Issues'* forum has been a great help, dating
 back to April, more specifically…



 4/01/2010 Subject: Enterprise Anti-Virus, rz...@qwest.net

 4/21/2010 Subject: Sophos vs. Vipre Enterprise, jholmg...@xlhealth.com

 5/06/2010 Subject: NOD32 Antivirus, jda...@asmail.ucdavis.edu

 5/09/2010 Subject: Life just keeps getting better, kurt.b...@gmail.com

 7/29/2010 Subject: Vipre effectiveness  false positives,
 c.house...@gmail.com



 *1) Installation / Deployment*

 Server installs both went smooth.  In deployment Sophos had few if any
 issues. Viper deployment to server required countless exclusions (painfully
 so)… in fact when our server crashed, we were told that a few exclusions
 were missing (Agh!). Viper deployment to host on two systems came with MANY
 surprises. The Vipre agent loaded a “NDIS IM” element in the TCPIP stack,
 causing CISCO (IPSec) clients to connect… oddly not allowing us to remote
 TS, Dameware, and other remote applications. SonicWall VPN clients remained
 unaffected. Vipre even caused slowness, freezing during printing,
 multi-tasking, and issues with Adobe Acrobat. Some of these issues we just
 gave up on attempting to resolve and disabled the firewall entirely. When a
 MSP firm cannot remote access…this is serious!! We couldn’t get support soon
 enough… and unfortunately cases remain open 4-5 days after the fact. Vipre
 left our accounting department, using a PSA software (ConnectWise), locked
 out for an entire day.



 *2) Post Installation*

 Sophos agent with firewall was documented as utilizing up to 150+ MB of RAM
 (enormous)… we were told, “…the price you pay for good protection”.  We were
 not comforted, despite this fact the users never complained about slower
 speeds.  Vipre utilized a fraction of this, maybe 7 MB… albeit given the
 deployment issues (above) we remain unimpressed by any benefit there might
 be. Sophos comes along with definitions updated hourly, Vipre (so we are
 told) is heading in this direction too. Vipre currently is defaulted to
 update every 3-hours, and that default can be changed (…the value??).



 *3) 24-hour Enterprise support*

 Vipre Enterprise technicians we found were skilled, sadly they are scantily
 available on weekend (evenings).

 Sophos Endpoint Security we found were equally skilled and **always**
 available.  Despite not having a “Premium” support agreement, we found
 Sophos enthusiastic when it came to remote access (LogMeIn). If (in the rare
 occasion) Vipre was asked to remote, remote was either unavailable or they
 were flat

Re: Sophos vs. Vipre Enterprise (now that we have tested both)

2010-08-11 Thread justino garcia
Yea also had some issues with deployment of vipre on a ternimal server.
and that agents must reboot pc, was also an issue with vipre.

Also vipre should have a to autodetect what folder not to scan on a server,
like a sql or exchange server.

Overall vipre takes less Memory so in that respect it is good.
and vipre support been okay, better then others.

Hopefully vipre 5.0 will be much improved.

I hope vipre improves on MSP who want to host vipre, *using a one server to
many different companies*

On Wed, Aug 11, 2010 at 9:20 PM, Jon Harris jk.har...@gmail.com wrote:

 Sarcasm on/*

 Anything?  You actually think Symantec is better or the same?

 /* Sarcasm off

 Jon

 On Wed, Aug 11, 2010 at 6:13 PM, Raper, Jonathan - Eagle 
 jra...@eaglemds.com wrote:

  +100



 If only more of us had the luxury of being able to be as diligent as you
 have been, Jeff.



 Sadly, we had to turn down Vipre as well earlier this year. We ended up
 going with Trend Micro, and we’ve been pleased thus far (we moved away from
 McCrapfee, so really anything would be better). We didn’t consider Sophos,
 as we really didn’t have time to look at more than a couple of options.



 We’ve been running GFI MailEssentials for YEARS, and haven’t looked back.
 GFI is a great company to work with, and their spam filtering application is
 solid. It will be truly interesting to see what the Sunbelt/GFI
 merger/acquisition will bring to the table for people like us.



 Jonathan L. Raper, A+, MCSA, MCSE
 Technology Coordinator
 Eagle Physicians  Associates, PA*
 *jra...@eaglemds.com*
 *www.eaglemds.com
   --

 *From:* Andrew S. Baker [mailto:asbz...@gmail.com]
 *Sent:* Wednesday, August 11, 2010 5:54 PM
 *To:* NT System Admin Issues
 *Subject:* Re: Sophos vs. Vipre Enterprise (now that we have tested both)



 Well done on the evaluation, Jeff.



 I expect that it will be helpful to many, including Sunbelt.



 *ASB *(My XeeSM Profile) http://xeesm.com/AndrewBaker
 *Exploiting Technology for Business Advantage...*
 * *

 Signature powered by WiseStamp http://www.wisestamp.com/email-install



 On Wed, Aug 11, 2010 at 4:56 PM, Jeff S. Gottlieb 
 jeff.s.gottl...@gmail.com wrote:



 We are in an SMB environment of roughly 60 servers and 1000 hosts,
 including Server 2003, 2008, SBS2003, SBS2008, XP Pro SP3, Windows 7, and
 Vista workstations. Sophos Endpoint Security along with PureMessaging, and
 Vipre Enterprise Premium along with Vipre Email Security are being put to
 the test head-to-head.



 We are staunch fans of Sunbelt Software.  Our experiences with Vipre Email
 Security (much improved over Ninja) has been great over the years.  For over
 10-years we have placed our trust in Trend Micro, something that has
 deteriorated slowly over the past 24-months.  In any event, we are hoping
 that our published comparisons will meet objectivity, and help to give 
 reassurance
 to future Vipre users regardless of the decisions we ultimately made.



 The Sunbelt *'NT System Admin Issues'* forum has been a great help,
 dating back to April, more specifically…



 4/01/2010 Subject: Enterprise Anti-Virus, rz...@qwest.net

 4/21/2010 Subject: Sophos vs. Vipre Enterprise, jholmg...@xlhealth.com

 5/06/2010 Subject: NOD32 Antivirus, jda...@asmail.ucdavis.edu

 5/09/2010 Subject: Life just keeps getting better,
 kurt.b...@gmail.com

 7/29/2010 Subject: Vipre effectiveness  false positives,
 c.house...@gmail.com



 *1) Installation / Deployment*

 Server installs both went smooth.  In deployment Sophos had few if any
 issues. Viper deployment to server required countless exclusions (painfully
 so)… in fact when our server crashed, we were told that a few exclusions
 were missing (Agh!). Viper deployment to host on two systems came with MANY
 surprises. The Vipre agent loaded a “NDIS IM” element in the TCPIP stack,
 causing CISCO (IPSec) clients to connect… oddly not allowing us to remote
 TS, Dameware, and other remote applications. SonicWall VPN clients remained
 unaffected. Vipre even caused slowness, freezing during printing,
 multi-tasking, and issues with Adobe Acrobat. Some of these issues we just
 gave up on attempting to resolve and disabled the firewall entirely. When a
 MSP firm cannot remote access…this is serious!! We couldn’t get support soon
 enough… and unfortunately cases remain open 4-5 days after the fact. Vipre
 left our accounting department, using a PSA software (ConnectWise), locked
 out for an entire day.



 *2) Post Installation*

 Sophos agent with firewall was documented as utilizing up to 150+ MB of
 RAM (enormous)… we were told, “…the price you pay for good protection”.  We
 were not comforted, despite this fact the users never complained about
 slower speeds.  Vipre utilized a fraction of this, maybe 7 MB… albeit given
 the deployment issues (above) we remain unimpressed by any benefit there
 might be. Sophos comes along with definitions updated hourly, Vipre (so we
 are told) is heading