Solved

Recommendation for an antivirus - with agentless for vSheild and virtual appliance

Posted on 2013-11-11
9
673 Views
Last Modified: 2013-11-17
Hi guys,

One of our customer wants to purchase a an antivirus software with the following capabilities.

Please note that it has to support vSheild and agentless scanning, as well as the management console has to be a virtual appliance.

Your recommendations will be more than welcome!
BTW, from a swift check, it seems that 2 products are eligible; Trend Micro and Kaspersky.


The solution must offer at least the following functions:
· Scanning on demand and at the access of any information storage support (HDD, CD-ROM, USB Flash Memory).
· Automatic scanning “on access” (in real time) of the folders which are copied from an external support and from LAN or WAN.
· Automatic scanning “on access” (in real time) of the folders can be set to scan only few types of folders, defined by the administrator.
· Automatic scanning “on access” (in real time) of the folders can be set not to scan the archives larger than a configured size, where the size of the folders can be defined by the solution administrator.
· The paths configuration to be scanned, including at folders’ level.
· Heuristic behavior scanning by simulating a virtual computer where applications with potential risks are run, protecting the system against the unknown viruses by detecting the dangerous codes of which the signature was not launched yet.
· Scanning in archives and debugging in an usual formats series (arj, ace, cab, dbx, gzip, lha, mbx, mime, pdf, pst, rar, rpm, rtf, sfx, tar, zip).
· Capacity of selecting the main and secondary action type when detecting an infected message.
· With the complete database with spyware signatures and euristic detection of this type of program, the product should provide anti-spyware protection and allow the prevention of confidential data stealing.
· For avoiding the overloading the system resources the antivirus product must contain a single scanning engine and to be able to run the programmed scans with low priority.
· For a better protection, the antivirus solution must include 3 types of detection: based on signatures, folders behavior and monitoring the processes.
· The antivirus product should allow the automatic erase of duplicated folders or of those in quarantine, older than a certain period, for avoiding overloading the storage space.
· Capacity to move a folder into quarantine in his original location.
· The protection using a password for the access to the management console of the antivirus solution.
· Capacity to create reports based on reports model defined within the management console.
· Generating programmed reports. The reports can be exported to be viewed/printed in the following formats: CSV and PDF.
· Antivirus update to be done automatically at maxim 2 hours, but also at demand.
· Capacity to establish the downloading time of the updates.
· For the security of the update system, the update folders will be signed by the manufacturer.
The antivirus solution for servers must be licensed for the entire servers’ infrastructure and stations for which the Bidder proposes a system without virtualization.
For ensuring the safety also for the virtual media, the solution must fulfill at least the following characteristics:
· The solution must include a single virtual scanning machine which should include all the antimalware signatures, to offer a full protection and up to date and an optimized scanning.
· It must be integrated with the provided virtualization solutions and must offer the capacity of antimalware scanning, without installing an antivirus on each virtual machine.
· The management console must be delivered as a „virtual appliance”.
· The management console must include the malware outbreak detection.
· The management console must record all the operations carried out by the users within an audit journal.
· The solution must ensure the automatic update of the virtual appliance, antivirus signatures, features (product update) and of the operating system based on which the virtual appliance is built on.
· The solution must report the current status of the data center safety – protected/unprotected virtual machines.
· The solution must allow the individual update of each „virtual appliance” if more than one is installed.
· The solution must send alerts and notifications via e-mail.
· The antivirus solution for virtual environment must be licensed for the entire servers’ infrastructure for which the Bidder proposes the virtualization.


Huge Thanks in advance
0
Comment
Question by:IT_Group1
  • 4
  • 3
  • 2
9 Comments
 
LVL 16

Accepted Solution

by:
Dirk Mare earned 250 total points
ID: 39639330
everything except for this
The antivirus solution for virtual environment must be licensed for the entire servers’ infrastructure for which the Bidder proposes the virtualization.

Not sure what you are asking for here do you want AV for your Host servers?

Trend Micro Worry Free Business Advanced can do all of this and more..

Block Websites
Setup URL Filtering
Restrict internet browsing during certain hours of the day.
0
 

Author Comment

by:IT_Group1
ID: 39639405
Thanks DirkMare
It means that the solution shouldn't be priced per-agent, as it'll be based for physical servers and ESXi hosts.

So, I understand the Trend Micro Worry Free Business Advanced will pull it off?
0
 
LVL 119
ID: 39639497
Trend or Symantec.
0
Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

 
LVL 16

Expert Comment

by:Dirk Mare
ID: 39639746
Trend is per client install.

Not sure about symantec.
0
 

Author Comment

by:IT_Group1
ID: 39640850
Hancock, Symantec is not compliant with the customer's needs.
0
 
LVL 119
ID: 39641036
In that case we would recommend Trend Micro.
0
 

Author Comment

by:IT_Group1
ID: 39654247
Ok guys, you were right; Trend can do all this and more, BUT Kaspersky does also.
I've received quotes from both of them. Kaspersky is cheaper by ~30%. Which product do you recommend?
Does any of you has experienced with them both with the required features (vSheield integration, agentless scanning, virtual appliance management etc..)?

Thanks in advance
0
 
LVL 119

Assisted Solution

by:Andrew Hancock (VMware vExpert / EE MVE^2)
Andrew Hancock (VMware vExpert / EE MVE^2) earned 250 total points
ID: 39654273
Trend Micro.

Yes, we dumped Kaspersky, it does not have the pedigree and support that Trend Micro has!

Pay's your money and take your chances!

Get an evaluation of both, readily available, and compare.
0
 

Author Closing Comment

by:IT_Group1
ID: 39654423
Thanks
0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

If you thought ransomware was bad, think again! Doxware has the potential to be even more damaging.
Is your company's data protection keeping pace with virtualization? Here are 7 dynamic ways to adapt to rapid breakthroughs in technology.
In this video tutorial I show you the main steps to install and configure  a VMware ESXi6.0 server. The video has my comments as text on the screen and you can pause anytime when needed. Hope this will be helpful. Verify that your hardware and BIO…
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…

829 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question