Bald Guy 
United Kingdom
Member since
8/18/2007
Registered Users
Posts: 103
 |
| 3/03/2008 06:03 PM |
|
i was using Symantec Mail Security at some point of time but it is the time now to either upgrade the licence or decide on other solution.
SMC (Symantec Mail Security) was not bad, but it does cover only emails and not the entire server.
what do you guys use with SBS? ideally i would want clients machine security/protection as well but that's not obligatory.
|
|
old fart |
|
|
|
Michael Patrick
United States
Member since
10/26/2005
Platinum Membership
Posts: 1894
|
| 3/03/2008 06:08 PM |
|
Oh no....not this subject again.... You will find a bunch of posts about this if you search for them 
What I hear most often is Trend Micro though. Symantec I have and still use, but the company I currently work with updated without consulting me first.
|
|
Michael Patrick
"Technology Interpreter Extraordinaire"
CAD, BIM & SBS |
|
|
|
Bald Guy
United Kingdom
Member since
8/18/2007
Registered Users
Posts: 103
|
| 3/03/2008 06:11 PM |
|
| thanks Mike and sorry for beating the dead horse again.. |
|
old fart |
|
|
|
Ivor Shepcar
United Kingdom
Member since
2/28/2008
Platinum Membership
Posts: 25
|
| 3/03/2008 06:18 PM |
|
We have used Norton Antivirus small business corporate edition 8, 9, 10, 10.1, 10.2 with great success on 25 clients servers. It covers workstations and the server and we have not really bothered with the mail security version as the client checks the email as it arrives.
We are now using Symantec Endpoint Protection 11.0 and although it requires more resource (2GB memory & 10 GB HDD on server) it works well. Includes Mail security but we have not yet implemented that. (we spent 3 months testing the release version and then a Maintenance Release came out and changed things somewhat.)
I noticed today a server running endpoint 11 detected viruses at the pop collector so it never even got as far as teh client.
And it's cheapish.
Only thing is many servers only have a 20Gb C: drive and for this and other recent updates to SBS Premium, it needs to be 40GB
There is a very good white paper on Symantyec's web about implementation.
We now have endpoint 11 on 6 of our clients servers and so far, so good.
|
|
|
|
|
|
Bald Guy
United Kingdom
Member since
8/18/2007
Registered Users
Posts: 103
|
| 3/03/2008 06:25 PM |
|
| thanks Ivor, the only drawback i have noticed from using the Mail Security was when you reboot the server Mail Security won't start up normally for unknown reason and will block clients access to Exchange mail store. it is a little annoying and afaik can only be cured by rebooting machine again which in case with SBS is a very long process. other than that i would say it worked quite well. I will look into solution you guys mentioned and decide upon that.
|
|
old fart |
|
|
|
Bald Guy
United Kingdom
Member since
8/18/2007
Registered Users
Posts: 103
|
| 3/03/2008 06:35 PM |
|
| BTW, is it a good practice to run Anti-Virus/Protection software on SBS machine or on separate?
|
|
old fart |
|
|
|
Ivor Shepcar
United Kingdom
Member since
2/28/2008
Platinum Membership
Posts: 25
|
| 3/03/2008 06:46 PM |
|
I always run the symantec on the server as it is the only machine that you can guarantee to be switched on.
|
|
|
|
|
|
william warren
United States
Member since
12/8/2005
Registered Users
Posts: 499
|
| 3/03/2008 06:48 PM |
|
Posted By Bald Guy on 3/03/2008 06:35 PM
BTW, is it a good practice to run Anti-Virus/Protection software on SBS machine or on separate?
I don't run a/v on the server itself for internet based threats. i setup astaro or highly customized ipcop machines to scan all incoming traffic bound for the network. The windows server i use to push out a/v clients to the workstations. The server I will run standard a/v on to protect the file systems but for scanning for mail, web, and downloaded threats i run it on a separate machine.
|
|
Registered Microsoft Partner |
|
|
|
Michael Patrick
United States
Member since
10/26/2005
Platinum Membership
Posts: 1894
|
| 3/03/2008 07:03 PM |
|
Posted By Bald Guy on 3/03/2008 06:35 PM
BTW, is it a good practice to run Anti-Virus/Protection software on SBS machine or on separate?
YES! Make sure you get a Small Business compatible that will scan your Exchange as well as shared drives. Most of these have the capability to install client versions on your workstations as well that will push out updates!
|
|
Michael Patrick
"Technology Interpreter Extraordinaire"
CAD, BIM & SBS |
|
|
|
Bald Guy
United Kingdom
Member since
8/18/2007
Registered Users
Posts: 103
|
| 3/03/2008 07:05 PM |
|
| sorry by yes you mean SBS or another? i should have made a poll..
|
|
old fart |
|
|
|
william warren
United States
Member since
12/8/2005
Registered Users
Posts: 499
|
| 3/03/2008 07:08 PM |
|
| I don't have a/v scanning for exchange on the sbs machine. I put all internet threat scanning(http, mail, spam, downloading) on a separate machine that is not windows based. I only have file system scanning for the server and the workstations. |
|
Registered Microsoft Partner |
|
|
|
Bald Guy
United Kingdom
Member since
8/18/2007
Registered Users
Posts: 103
|
| 3/03/2008 07:15 PM |
|
i initially thought of building a dedicated sun/linux machine but lack of experience and fear of difficulties involved in routing the traffic through/from such box has put me off.
currently i have a continuos protection and tape backup server (win2K3) that i could use for this task, however you would probably need to connect it after router and before switch (inside network) or could it be run from inside network at all?
thanks
|
|
old fart |
|
|
|
Sam Thorpe
United States
Member since
4/14/2005
Platinum Membership
Posts: 120
|
| 3/03/2008 08:23 PM |
|
I install Trend Clent Server Messaging Security on all my SBS Servers and workstations. It works well.
I will not install any other AV solution on an SBS network. |
|
|
|
|
|
Sam Thorpe
United States
Member since
4/14/2005
Platinum Membership
Posts: 120
|
| 3/03/2008 08:25 PM |
|
Posted By Bald Guy on 3/03/2008 06:35 PM
BTW, is it a good practice to run Anti-Virus/Protection software on SBS machine or on separate?
Trend CSM/SMB 3.6 installs on the SBS Server and protects the SBS file server, SBS Exchange Server and workstations.
|
|
|
|
|
|
Bald Guy
United Kingdom
Member since
8/18/2007
Registered Users
Posts: 103
|
| 3/03/2008 08:37 PM |
|
| the only thing keeping me from shelling out for trendmicro is that US webstore is solely for US & Canadian customer but not the UK.. anyone knows where i can buy & download NeatSuite in the US and pay with UK card or paypal? Few UK offline shops offered to pay twice as much...
|
|
old fart |
|
|
|
Sam Thorpe
United States
Member since
4/14/2005
Platinum Membership
Posts: 120
|
| 3/03/2008 08:46 PM |
|
Why Neatsuite?
Trend CSM-SMB 3.6 is ideal for SBS. I run it exclusively at multiple SBS sites.
|
|
|
|
|
|
Bald Guy
United Kingdom
Member since
8/18/2007
Registered Users
Posts: 103
|
| 3/03/2008 08:51 PM |
|
thanks for the links Sam. as i am fairly new to trend micro product line do you by chance know the difference between two?
also i would like to buy&download and UK website won't offer that unfortunately.. going through the channel disty is PITA as they would charge arm and a leg here! any ideas?
|
|
old fart |
|
|
|
Bald Guy
United Kingdom
Member since
8/18/2007
Registered Users
Posts: 103
|
| 3/03/2008 09:01 PM |
|
found it (difference that is)
|
|
NeatSuite Enterprise
|
NeatSuite Standard
|
Client/Server Messaging
|
Client/Server Suite
|
NeatSuite would offer POP/SMTP/HTTP/FTP protection in addition to CSM. other than that they look identical.
|
|
old fart |
|
|
|
Sam Thorpe
United States
Member since
4/14/2005
Platinum Membership
Posts: 120
|
| 3/03/2008 09:35 PM |
|
CSM-SMB scans all mail in and out of exchange. The CSM-SMB desktop client will scan POP mail and web mail.
I don't do FTP on my SBS servers.
CSM-SMB is scaled for an SBS installation. It is probably cheaper than Neat Suite. Don't know for sure because I only use CSM-SMB  |
|
|
|
|
|
Neil Beswick
United Kingdom
Member since
9/26/2007
Platinum Membership
Posts: 94
|
| 3/04/2008 09:15 AM |
|
I'd recommend Sophos AV and PureMessage. It also has neat features like application control (can block certain applications - I know this can be done via GPO, but it is quicker to do via the AV client!). PureMessage is AV / Anti-Spam for Exchange (gateway and store), and other message control - such as profanity blocking, attachment type blocking (again, I know it can be done via GPO!) etc etc.
I definitely wouldn't use Symantec Endpoint security!
Neil. |
|
|
|
|
|