• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 483
  • Last Modified:

Would we need anti-virus software on public computers if we are using Deep Freeze and Anti-Executable?

We have about 150 public computers and we currently run Deep Freeze with Norton Antivirus. The problem is keeping norton up to date while using deep freeze and running scans. Although we followed the instructions that deep freeze puts out on how to run them side by side we still run in to some machines that will not update correctly.

So I got to wondering do we really even need an anti-virus software on these machines due to the fact we are running Deep Freeze? We also recently purchased Anti-Exec from Faronics as well and plan to implement that on the machines. So between the two products do we really need an antivirus? why or why not?
0
JDL_Tech
Asked:
JDL_Tech
  • 3
1 Solution
 
briancassinCommented:
The problem is Deep Freeze will fix the machine, but only when you restart it.  Therefore,
if a person gets a virus on the machine and other people use it (with a floppy
or to send a file) before the problem is noticed, they may spread the virus. This is especially true for microsoft word or if they are saving other things and sharing them.

The other problems are if it is a worm it could work its way through your network until you reboot therefore machines without deep freeze could be affected.

Additionally if you are using roaming user profiles or have user profiles so that for instance my documents is mapped back to a server the server would still have to have protection on it and a virus on the workstation computer could actively attack the server until the workstation is rebooted that contains the virus. Which means if it breaks through to the server your network is now comprimised.

So all in all I would advise against still  using anti virus on those workstations.


you may also want to look at this article it explains the differences and nuances of programs like Anti-Exec
http://www.ranum.com/security/computer_security/editorials/antivirus/

An example would be you could whitelist Adobe Acrobat reader later on a security hole is discovered through a buffer overflow attack that gives elevated permissions to the system. Since it is whitelisted your anti-exec is going to let it through.
0
 
jderaCommented:
Absolutely you still need Norton.  Deep Freeze sets the PC back to the baseline config, meaning you get a virus and you restore it with deep freeze you will lose things on the PC.  Anti-exec just stops executables, there are other ways to get viruses then just running executables.  Big mistake to take AV off.
0
 
briancassinCommented:
Sorry I mistyped this line should  obviously it made no sense with my argument being you still need anti virus to say... "So all in all I would advise against still  using anti virus on those workstations."

that line was completely mistyped it should have read

"So all in all I would advise against not using anti virus on those workstations."

In other words yes absoutely keep your anti virus! for the reasons I stated above
0
 
JDL_TechAuthor Commented:
Exactly what I was looking for thank you for your comments
0
 
briancassinCommented:
thank you... sorry I typed it wrong the first time. I probably could have worded it better.
0

Featured Post

SMB Security Just Got a Layer Stronger

WatchGuard acquires Percipient Networks to extend protection to the DNS layer, further increasing the value of Total Security Suite.  Learn more about what this means for you and how you can improve your security with WatchGuard today!

  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now