Solved

Recommendation for an antivirus - with agentless for vSheild and virtual appliance

Posted on 2013-11-11
9
656 Views
Last Modified: 2013-11-17
Hi guys,

One of our customer wants to purchase a an antivirus software with the following capabilities.

Please note that it has to support vSheild and agentless scanning, as well as the management console has to be a virtual appliance.

Your recommendations will be more than welcome!
BTW, from a swift check, it seems that 2 products are eligible; Trend Micro and Kaspersky.


The solution must offer at least the following functions:
· Scanning on demand and at the access of any information storage support (HDD, CD-ROM, USB Flash Memory).
· Automatic scanning “on access” (in real time) of the folders which are copied from an external support and from LAN or WAN.
· Automatic scanning “on access” (in real time) of the folders can be set to scan only few types of folders, defined by the administrator.
· Automatic scanning “on access” (in real time) of the folders can be set not to scan the archives larger than a configured size, where the size of the folders can be defined by the solution administrator.
· The paths configuration to be scanned, including at folders’ level.
· Heuristic behavior scanning by simulating a virtual computer where applications with potential risks are run, protecting the system against the unknown viruses by detecting the dangerous codes of which the signature was not launched yet.
· Scanning in archives and debugging in an usual formats series (arj, ace, cab, dbx, gzip, lha, mbx, mime, pdf, pst, rar, rpm, rtf, sfx, tar, zip).
· Capacity of selecting the main and secondary action type when detecting an infected message.
· With the complete database with spyware signatures and euristic detection of this type of program, the product should provide anti-spyware protection and allow the prevention of confidential data stealing.
· For avoiding the overloading the system resources the antivirus product must contain a single scanning engine and to be able to run the programmed scans with low priority.
· For a better protection, the antivirus solution must include 3 types of detection: based on signatures, folders behavior and monitoring the processes.
· The antivirus product should allow the automatic erase of duplicated folders or of those in quarantine, older than a certain period, for avoiding overloading the storage space.
· Capacity to move a folder into quarantine in his original location.
· The protection using a password for the access to the management console of the antivirus solution.
· Capacity to create reports based on reports model defined within the management console.
· Generating programmed reports. The reports can be exported to be viewed/printed in the following formats: CSV and PDF.
· Antivirus update to be done automatically at maxim 2 hours, but also at demand.
· Capacity to establish the downloading time of the updates.
· For the security of the update system, the update folders will be signed by the manufacturer.
The antivirus solution for servers must be licensed for the entire servers’ infrastructure and stations for which the Bidder proposes a system without virtualization.
For ensuring the safety also for the virtual media, the solution must fulfill at least the following characteristics:
· The solution must include a single virtual scanning machine which should include all the antimalware signatures, to offer a full protection and up to date and an optimized scanning.
· It must be integrated with the provided virtualization solutions and must offer the capacity of antimalware scanning, without installing an antivirus on each virtual machine.
· The management console must be delivered as a „virtual appliance”.
· The management console must include the malware outbreak detection.
· The management console must record all the operations carried out by the users within an audit journal.
· The solution must ensure the automatic update of the virtual appliance, antivirus signatures, features (product update) and of the operating system based on which the virtual appliance is built on.
· The solution must report the current status of the data center safety – protected/unprotected virtual machines.
· The solution must allow the individual update of each „virtual appliance” if more than one is installed.
· The solution must send alerts and notifications via e-mail.
· The antivirus solution for virtual environment must be licensed for the entire servers’ infrastructure for which the Bidder proposes the virtualization.


Huge Thanks in advance
0
Comment
Question by:IT_Group1
  • 4
  • 3
  • 2
9 Comments
 
LVL 16

Accepted Solution

by:
Dirk Mare earned 250 total points
ID: 39639330
everything except for this
The antivirus solution for virtual environment must be licensed for the entire servers’ infrastructure for which the Bidder proposes the virtualization.

Not sure what you are asking for here do you want AV for your Host servers?

Trend Micro Worry Free Business Advanced can do all of this and more..

Block Websites
Setup URL Filtering
Restrict internet browsing during certain hours of the day.
0
 

Author Comment

by:IT_Group1
ID: 39639405
Thanks DirkMare
It means that the solution shouldn't be priced per-agent, as it'll be based for physical servers and ESXi hosts.

So, I understand the Trend Micro Worry Free Business Advanced will pull it off?
0
 
LVL 118
ID: 39639497
Trend or Symantec.
0
 
LVL 16

Expert Comment

by:Dirk Mare
ID: 39639746
Trend is per client install.

Not sure about symantec.
0
Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

 

Author Comment

by:IT_Group1
ID: 39640850
Hancock, Symantec is not compliant with the customer's needs.
0
 
LVL 118
ID: 39641036
In that case we would recommend Trend Micro.
0
 

Author Comment

by:IT_Group1
ID: 39654247
Ok guys, you were right; Trend can do all this and more, BUT Kaspersky does also.
I've received quotes from both of them. Kaspersky is cheaper by ~30%. Which product do you recommend?
Does any of you has experienced with them both with the required features (vSheield integration, agentless scanning, virtual appliance management etc..)?

Thanks in advance
0
 
LVL 118

Assisted Solution

by:Andrew Hancock (VMware vExpert / EE MVE)
Andrew Hancock (VMware vExpert / EE MVE) earned 250 total points
ID: 39654273
Trend Micro.

Yes, we dumped Kaspersky, it does not have the pedigree and support that Trend Micro has!

Pay's your money and take your chances!

Get an evaluation of both, readily available, and compare.
0
 

Author Closing Comment

by:IT_Group1
ID: 39654423
Thanks
0

Featured Post

What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

Join & Write a Comment

VMware Update Manager(VUM) “error code: 15” during ESXi 6.0 Remediate update in VUM operation
For Backups Guest OS files and indexing(and application awareness), Veeam needs Admin rights in Guest OS(Windows and Linux). In Windows a Domain Administrator account, and in Linux root access to perform this type of Backups and also Restore.
How to install and configure Citrix XenApp 6.5 - Part 1. In this video tutorial we have explained step by step installation of Citrix XenApp 6.5 Server on Windows Server 2008 R2 is explained in this video. We have explained the difference between…
In this video tutorial I show you the main steps to install and configure  a VMware ESXi6.0 server. The video has my comments as text on the screen and you can pause anytime when needed. Hope this will be helpful. Verify that your hardware and BIO…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now