Re: Trend Micro SMB v3 Configuration Questions

Inline, Dale ...

It's a very new product and most of us are feeling our way through it ;-).
Even for those of us that also use V2, it's quite different. I might tend to
like V2 better that V3 at this point, but it's got nothing to do with the
pieces you're looking at. You probably have the CS version (client/server),
while most here would have CSM (messaging) - the majority of the changes are
in the M piece.

Officescan has always offered first class file space protection. I haven't
seen anything that would indicate that has changed with this version. But I
agree that some of the status reporting seems to be somewhat more hidden;
perhaps we haven't turned over all of the rocks yet.

My suggestion would be to try and plant a few eicar test viruses here and
there, and see how it performs.

--
Les Connor [SBS Community Member - SBS MVP]
-----------------------------------------------------------
SBS Rocks !
----------------------
"Tell me and I'll forget. Show me and I'll remember. Involve me and I'll
understand." - Confucius


<DaleNDani@xxxxxxxxx> wrote in message
news:1133916615.624307.111540@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> Well after much searching through the groups this one appears to have
> the most discussion concerning this product so I hope I can find some
> answers here. After two hours with tech support and no real answers,
> something is better than nothing!
>
> We have never tried Trend Micro before, and we have just recently
> started using the evaluation version of v. 3. We have successfully
> installed it on windows xp and windows 2000 machines and have had none
> of the problems described here about pushing it to other machines.
>
> SMB is configured for a scheduled scan on all of our machines and it
> only reports virurses that could not be deleted nor cleaned, and it
> only reports and makes logs for machines where something was detected.
> Does anyone know how or if there is a way to:
>
> 1. Display on the live settings tab of the security dashboard
> all threats found whether or not they were cleaned or deleted without
> having to search through logs?

If there's an issue, the live status should give you a red blob with some
links.

>
> 2. View a log on for all machines that were scanned. Since we
> are evaluating it we would like to know if our remotes are scanning
> when scheduled and how long it takes. We can only find logs on machines
> where threats were found and we don't want to assume that the others
> were scanned with no threats detected.

You can probably schedule a report that would show details, but I'm not
sure. I don't do scheduled scans - real-time scanning is always on.

>
> 3. On the Outbreak Defense>Current Status tab. The only box
> there is prevention and everything within it is N/A and the Automatic
> Response button is disabled. Does this only become active if there is
> an outbreak? Does it not work in the eval version?

Click the ? icon in the upper right hand corner of the page - it explains it
pretty well. AFAIK, there's nothing disabled in the trial version - the
Outbreak Defence is enabled by default - you should see this on the Settings
tab.

>
> Trend Micro support told me that they were not as familar with v. 3 and
> she could help us if we had v.2. As for the first two question my
> "engineer" told me that the server would be overloaded if all the
> clients responded at once. So there is no way of logging duration and
> on what machines a scheduled scan took place or to display all threats
> in the live settings tab. She also told me that the there were more
> options and ways of viewing what activity on the clients through v.2.
> Didn't really help me, but are there really more features in v.2 than
> v. 3? Support also said that since we had the eval version the Outbreak
> Defense stuff would be disabled. She really tried to help me, but I
> don't think she had a clue what she was talking about. Does anyone have
> any other input?
>
> Thanks in advance!
>


.