From Ryan Groom,
Your Guide to Business Security.
FREE Newsletter. Sign Up Now!

Introduction

Deploying an anti-virus solution for your enterprise is not as simple as installing an anti-virus program on each of your computers anymore. Malware has become complex and can enter your network from many vectors. Viruses used to come into the network by floppy disk. Now they enter the network by via infected home computers connected by VPN, email carrying malware, and users surfing inappropriate web sites.

Each time you put anti-virus detection in place there is software/hardware and processes that must be maintained to ensure its effectiveness. Maintenance means resources (time and money) that need to be deployed to keep your anti-virus protection up to date and effective. As #8 of the 10 Immutable Laws of Security states, “An out of date virus scanner is only marginally better than no virus scanner at all.”

So where should you install your anti-virus solution? What are the pros and cons of various configurations? Should I install technology from multiple vendors?

The following are popular places that anti-virus solutions are deployed and a few basic pros and cons of each solution.

Email Anti-Virus Gateway

Pros: Scans every email that enters and leaves the email servers. Single group of devices that require signatures updates.

Cons: A single policy may not meet the complex demands of your users. If the gateway appliance is down it can cause an email outage. If signatures are not updated it can expose your entire enterprise.

Anti-Virus Software for Email Server

Pros: Installs directly on the email server. Integrates into the email server to offer advanced protection.

Cons: Unstable anti-virus software can cause negative effects on your email server. If installing software on a high volume production server then the necessary testing is paramount.

Anti Virus Web Proxy

Pros: Eliminates malware at the point of entry into your network. Blocks malware before it is sent to the desktop or server.

Cons: Can slow down Internet access for users. If it is down it can bring down Internet access for the users.  

Server/Desktop Anti-Virus

Pros: Many mature and effective solutions to pick from for desktop/server protection. Provides protection to the computer if other network anti-virus technologies fail. Effective if a virus outbreaks happens inside the network.

Cons: Must install software on the desktop/server. Desktops not connected to a corporate virus update server must go to the Internet to get updates. Certain deployments can allow users configure and turn off anti-virus software.

More Than One Vendor

The biggest negative about any anti-virus solution is none of them capture 100% of all viruses. The best thing you can do for your enterprise is have at least antivirus technology in 2 places using 2 different vendors within your enterprise scanning your network activity keeping your user’s computers, data and enterprise network safe from the aggravations of malware.

Anti-Virus Signatures

No matter what anti-virus solution that is deployed, if the malware signatures are not kept up to date, this will render your anti-virus solution ineffective.