Re: AVG 7.5?

In article <##v389JRIHA.1208@xxxxxxxxxxxxxxxxxxxx>, "Larry Struckmeyer"
<lstruckmeyer(at)mis-wizards(dot)com> says...

Are you saying that the long list of exclusions that Trend, MS, and others
recommend are simply not necessary? For example, I have seen two SBS
servers go to "journal wrap" and in both cases the apparent cause was the AV
engine scanning the sysvol folders.

Or, as Wayne has listed them?

http://www.sbsfaq.com/Lists/FAQs/DispForm.aspx?ID=137&Source=http%3A%2F%2Fwww%2Esbsfaq%2Ecom%2Fdefault%2Easpx

If AVG somehow performs the scan without causing any problems with any of
the system files or exchange data, this would be reason enough to switch.
Or, alternatively, do we know if it is "smart" enough to exclude the
critical files and folders from its scans, both real time and manual?

I am not saying anything is or is not necessary - I'm just reporting my
personal experiences with my own network and those of my clients who use
AVG, which have been running for up to ~2 years. I have a couple of
clients using Symantec A/V Corporate - got them before I started using
AVG & there has been no reason to change - and I do have excludes set
with them. Your mileage may vary!

With that disclaimer: I just checked my own SBS. Neither AVG Resident
Shield (the real-time scanner), AVG for Exchange, nor the weekly
scheduled Complete Test have any explicit excludes defined, like those
Wayne lists.

However - and this is probably important - the real-time and scheduled
scans are set to "Scan infectable files" [which is the default] rather
than "Scan all files." Additional settings on the scheduled test
include:

* Use heuristic Analysis
* Scan NTFS Alternate Data Streams
* Use Smart Scan [checks files for type even if they have the wrong
or no extension]
* Scan Inside Archives
* Automatically heal infected files

The weekly scan is set to "All Local Drives" and includes subfolders.
It is scheduled for Sunday morngings at 6:05am. The most recent one (16
Dec 2007) scanned 89,992 files in 2:29:24 [shoemaker's children
syndrome: my server is old and very underpowered, one of the reasons I
like AVG: it is easy on resources].

I've never seen any evidence of a successful virus attack (I do, on
occasion, get notifications viruses have been caught) and I have never
experienced anything which could remotely be considered data corruption
or similar in Exchange, Sharepoint, system volumes, etc.

Again, just reporting my experiences.

-- Owen Williams (SBS MVP)
.

Relevant Pages

  • Re: AVG 7.5?
    ... I also use AVG SBS edition for a little over a year for a couple of clients and I don't have problems either. ... Again, just reporting my experiences. ...
    (microsoft.public.windows.server.sbs)
  • Re: antivirus for linux
    ... purposes (smb servers, desktops, e-mail gateways, etc.). ... I have also made small test of Sophos, F-Prot, Norton and AVG; ... > I'm kinda new to linux, and getting more and more worried about security. ... > pen testing experience in our state of the art hacking lab. ...
    (Security-Basics)
  • RE: All-in-one Spam/Virus Solution
    ... My clients are very happy with the IronPort Blocker I procured last month. ... spam/virus solution for our servers and workstations. ... catch the AVG product on the desktop will. ... using the free version of AVG on desktops in a business network ...
    (Security-Basics)
  • Re: Break off update services
    ... as the one customer of mine with SBS 2003 Premium and AVG does not have any such issues. ... Further, this is a complex network with two branch offices, all of which use the SBS as the inet gateway and update from the SBS server, not AVG's internet site. ... and ISA Server in the instance of SQL which is provided. ...
    (microsoft.public.windows.server.sbs)
  • Re: All-in-one Spam/Virus Solution
    ... workstations, servers, and email would be considered as well. ... Whatever they don't catch the AVG product ... using the free version of AVG on desktops in a business ...
    (Security-Basics)
Loading