Re: What security package for SBS?

I have a secure Windows network. I also have a secure MacMini and on occasion a secure Ubuntu. They are all secure because "I" have deployed them properly.

Let's leave the religion out of this please.

Now then, Trend is highly respected. Sophos if you have a mix of Apple and Windows, Kaspersky I don't see as much. I've only used NOD in stand alone deployments as well.

Recently Trend has been a bit "heavy" from what it used to be, but as long as you deploy any of these without firewalls they will be fine. Now even with a/v you are being reactionary and not proactive.

Install your desktops XP or Vista as standard users (and don't start the UAC is annoying religious argument either as I don't see UAC unless I'm updating Quicktime and other apps.

It's not a belief. Secure windows is a fact.

Colin wrote:
Hi,

Well, you can secure Windows. The problem here of course is knowing how to do it. With a business class firewall stripping crap off all incoming traffic and properly implemented security policies in addition to giving your users absolutely no admin rights, there is no reason to believe you can't create a secure Microsoft Network.
As for experience of Trend/Sophos/Kaspersky etc - I've used Trend CSM for SMB (3.6) and also Sophos Security Suite SBE (2.5) and found them to be very good products. Great support, easy to install/configure (you can download 30 day trials from each vendor's website). Kaspersky I've only ever used with stand alone desktops (outstanding detection rates) but I believe their products to be very good indeed. I've no experience of NOD and I wouldn't touch anything with McAfee on it (even if they started making beer). HTH.

Regards Colin.

"Dariusz Pieluc" <pielciu@xxxxx> wrote in message news:yw4nj.86916$wD5.32713@xxxxxxxxxxxxxxxxxxxxxxx
I do agree with you all, but this conversation went in a wrong way...I was asking about security enterprise
products, not only about AV. And frankly saying, nothing is goint to secure Windows....at all!

I use hardware firewall's, I manage Linux based networks/servers and few windows. But the question was not
how to build a proper network, but it was all about the product I have to chose for the amount of money I have and I can not go over :/

So please, if someone has any experience with TM/Sohpos/Kaspersky/NOD, please share with me :)

Uzytkownik "Colin" <Colin@xxxxxxxxxxxxx> napisal w wiadomosci news:eDcvWxQYIHA.5396@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

You're right, a home network is not the same as a SMB network (unless of course you are running your business from home and remotely administering 100's of client's server etc) but Susan's pointing out that you need something other than an AV solution firewall. Please bear in mind also that none of the 'all in one' security solutions is going to give you a server 'personal' software firewall, the firewall function is only going to install/work on the client machines. You need a hardware firewall to protect your server (alternatively, you could use ISA with SBS Premium - my preferrence would be hardware but it's your choice).

Regards Colin.

"Dariusz Pieluc" <pielciu@xxxxx> wrote in message news:Rg3nj.55073$Hc3.51338@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

There is a basic netgear firewall in front of the network.
I wouldn't compare home network with SMB, especailly with services running on open ports :P

Uzytkownik "Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" <sbradcpa@xxxxxxxxxxx> napisal w wiadomosci news:OjcSCjQYIHA.1532@xxxxxxxxxxxxxxxxxxxxxxx
Throw in a second nic and you have a firewall.. even a Linksys is preferable to using the built in firewall in the a/v sofware.

I use the XP and Vista firewalls on the desktop and use two nics and Linksys at home.

Frank McCallister SBS MVP wrote:
I agree with Claus on Trend but disagree with you on the Firewall issue. Get a separate Firewall and don't rely on your AV product for firewall protection.

I recommend Trend 3.6 for all my Clients. I disable the Personal Firewall and use ISA or External Firewall Appliance.







.

Relevant Pages

  • Re: Obama / McCain both hire incompetent IT staff, computers hacked
    ... firewall and use their Comcast cable modem account to get to my ... a so-called "secure" network is infallable. ... the same rules for secure networks as others. ... There is one insecure network in Saudi Arabia that people are ...
    (comp.security.firewalls)
  • Re: Obama / McCain both hire incompetent IT staff, computers hacked
    ... firewall and use their Comcast cable modem account to get to my station. ... this was from an IT consulting firm that specalises in firewalls. ... a so-called "secure" network is infallable. ... the same rules for secure networks as others. ...
    (comp.security.firewalls)
  • Re: ICMP Ping constantly ticked--risk or not?
    ... If you have the file and print sharing exception enabled on your firewall ... only allows access from your network only in edit - change scope. ... configuration setting to allow ping response or not. ... instead of WPA to secure wireless network traffic. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: XP networking without NetBIOS or Active Directory
    ... I agree that firewall is the single most important issue in securing ... Your other point - from who am I going to secure the network by ... > Windows machines beyond that, but that is a good start. ...
    (microsoft.public.win2000.networking)
  • RE: can ping but not browse
    ... I have stopped the firewall. ... # are safed from all (security) hazards. ... firewall/bastion host to the internet ... # internet and to an internal network, ...
    (Fedora)