>I have also rolled out Symantec AV Corporate Edition. My only problem is rolling out clients to the DMZ. Im not sure what ports to open for the updates, and if ports are opened what security risks are involved.
For security reasons, I have loaded on the administration workstation in the DMZ the System Console and administer AV from there in the DMZ. Yes, it requires to points to work from, but it keeps the DMZ separate. >The other issue is the virus definition are only downloaded once a week (Wednesday), i fixed this by writing a simple script to download and extract the definition file and put it in scheduler to run every morning. Through the definition manager on the server you can configure to update daily or even continuous update. John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com