Link to home
Start Free TrialLog in
Avatar of cheeba12
cheeba12

asked on

Symantec Corporate Edition

Got a question for everyone...
Currently we have Symantec Antivirus Corporate Edition for workstations and servers.  All computers are set up to be Managed.  All virus definitions are schedualed to be downloaded by the server daily, then pushed to all clients.  Real-time scanning is enabled with the in-ability for users to disable real-time scanning.  now my problem is...

I scan with Norton the whole drive, and nothing gets picked up
I then try a online scan with Trendmicro's house call.  And it picks up a Trojan.

For instance I tried it today same steps, and housecall found TROJ_IMISERV.C. & TROJ_AGENT-1 now both of these by Trend have come out late last month.

Does anyone know why the heck Norton doesn't scan properly?  Is it just a poor application? Did I throw the company's money away to a costly yet inaddiquate (spelling i know) virus protection?

Thanks, Cheeba

Avatar of 4ceReconSniper
4ceReconSniper

inadequate
Hi
According to symantec this  should be picked up - verify that you are scanning all files with no exclusions, and that you are fully up to date with virus defs (smack me hard but I need to suggest that anyway - maybe I am in denial;)) - Also what CE version are you on?Then maybe log a call to the symantec bods and see what on earth is going on - I am worried by this too and will be starting scans through other providers again in the not too distant future (although have had no obvious problems related to this to date) - Can you tell that I use Symantec Enterprise?

Backdoor.Imiserv
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.imiserv.html

Deb :))
Avatar of cheeba12

ASKER

Thanks, deb  

Norton doesn't understand why it doesn't work (on hold for just over an hour!!!) But apparantly there is a new version of Corporate Edition out (9.0) but I have yet to receive my letter with my login, so i'll probably have to be on hold with them tomorrow to get my "serial #" to download new file.

Hopefully that it helps out.

What are your views on Symantec? As well as other products out there? Cause I'm defiantly thinking about dropping Symantec as a virus protection when my subscription runs out.

cheeba
Hi

We've deployed it across the whole enterprise and so far it seems to be quite adept at catching the nasty little blighters that turn up in their 100's via email - but that's AVF for Exchange - and we've had very little detected and quarantined via CE. Scans are in progress now, so I'll let you know how it goes. It does cause me a lot of concern though that you are upgrading to 9.0 in order to (hopefully) adequately protect your system (almost like a microsoft trick - "if you want to do it right - upgrade!"). I have found it extremely easy to deploy, manage and monitor - although my experience of other solutions is zilch so I'd wait for other comments on comparisons. I believe that intelligent updater is updated daily, but the ordinary live-update defs less frequently, which is well behind other vendors and as symantec are pretty big I wonder what their excuse is?

Deb :))
Hi
You may find this worth a look as it's supposedly independent - you can sign up for a free pdf mag!
Virus Bulletin
https://www.virusbtn.com/

Deb :))

I check that out...

Currently I'm running "surprise" online scans of random computers to verify that they don't have virus either, I'll let you know if find any other.  but I totally agree that CE doesn't find anything.  And that Symantec is atleast 3 days behind everyone else with their definitions.  

Oh, by the way, Symantec has added a new feature called Expanded Threat Protection which is suppose to pick up everything better.  YAH RIGHT!

But other wise just a side note...I use Trend Micro at home at I've never had an issue.

cheeba
ASKER CERTIFIED SOLUTION
Avatar of Debsyl99
Debsyl99

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Lucky you, I'm trying despertly to add more restrictions for our current users...but when the've had free rain on the internet and their computer it gets hard trying to remove their rights! But I have found a few virus' not many, but a few here and there.  I've just updated the CE to 9.01 I guess we'll see how it goes.  But I agree, and suggest whole heartly not to support Symantec products as they are a company that falls behind in their field.

Deb, I was also pointed to e-trust as a virus solution, (computer associates).

Here are your points since you were helpful

Stu
Thanks Stu,

Please though, let me know how you go with CE 9.01, as I've a new site to bring online soon and I'd be ineterested to know how it goes, although I have absolutely no intention of using symantec there. I am now on the look out for other options.  My users think I am a network nazi, and they are probably mostly right ;-). A really good tactic is to get management on-side, and impose the heaviest restrictions ever (but not on management!). They'll moan and complain like hell, but will be more content when you compromise somewhat than if you had just tightened up in the first place! - I know - I should've been a politician ;-)

Thanks and Best Wishes

Deb :))