full-disclosure - Antivirus Software Solutions?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <200311280120.hAS1KCd442263@milan.maths.usyd.edu.au>
From: psz at maths.usyd.edu.au (Paul Szabo)
Subject: Antivirus Software Solutions?

Nick Price <webmaster@...at.com> wrote:

> I'm looking for two pieces of Antivirus software. The first I would like 
> to filter viruses at the NAT/Gateway itself.  The platform should be 
> either Linux, BSD, Solaris, or NT.  I'm also looking for Antivirus 
> software to use on each of our workstations.  We've been using Norton, 
> but I'd like to know what the "experts" here suggest.

Do not use "traditional" AV at all (as that would never protect you from
the latest virus). Rather, set up your email gateway to "defang" all
suspicious emails (e.g. containing EXE or SCR or PIF, or ZIP, attachments);
it is a matter to debate whether to reject (bounce), drop, or somehow
encode such things so as to render harmless. - Probably you will want your
email gateway to run UNIX/Linux, so you can set this up.

Once your email gateway is "safe", any AV on desktops becomes much less
important, but you may still want some "traditional" AV on your desktops;
any reasonably well supported product should do.

For some more blurb/details please see

  http://www.maths.usyd.edu.au:8000/u/psz/pc/virus.html

Cheers,

Paul Szabo - psz@...hs.usyd.edu.au  http://www.maths.usyd.edu.au:8000/u/psz/
School of Mathematics and Statistics  University of Sydney   2006  Australia