Server virus protection
My server has an anti virus program installed. Do I need to install anti virus programs on all workstations as well?
Reply by Chris from Far Edge Pty Ltd on Tuesday, 10 May, 2011 - 15:22
Yes yes yes! Kaspersky Enterprise is available now through DonorTec - it's an excellent product and we recommend it. Let me know if you need any help, Regards ChrisReply by Neil McLachlan from Co Serve Consulting on Tuesday, 10 May, 2011 - 16:03
You don't say which anti-virus program you're using on the server. However, both Kaspersky and Symantec desktop security products are offered at low cost through DonorTec and can be configured to work properly in most network scenarios. Another option which may suit your purposes - although not available through DonorTec at this time - is to use the AVG Anti-virus Free Edition 2011 for your workstations, leaving your current server anti-virus installation as is. Regards NeilReply by Debbie Lindsay from iseek computing on Tuesday, 10 May, 2011 - 18:53
You need to protect the workstations as well because people can bring in USB sticks and access external email and other services through the internet.Yes, email and files may be protected on the server, but all avenues for viruses to enter still need to be covered.
There are ways to reduce this risk which can be combined with Anti-virus, such as website site blocking via access control which could also be looked into if desired.
Hope that helps.
Simon
Reply by Grant Laing from Blended IT Solutions on Tuesday, 10 May, 2011 - 22:56
Yes, you really need to put the anti-virus on your workstations as well, as these are usually your first contact with a virus and the place that viruses try to attack first. Although it is not just viruses you have to worry, it is also malware, and malformed emails and hijacked websites. to have full protection you should have the following; 1. good offsite anti-spam solution (based in the cloud, as this will stop the nasty emails actually getting into the network) 2. email server, server security software and workstation endpoint protection, which can also include USB, and removable media protection. 3. having all this well managed, as having it all installed is only one step, you also need to make sure all the software updates and microsoft and other software is also updated, to make sure the holes are patched, that they use viruses to exploit. only with a fully rounded solution will you reduce your risk of attack. If you have not had any virus workstation protection on your workstations for quite a while, you might think of rebuidling each of the workstations to ensure that when you install the virus software they don't all of sudden become unstable and crash once the viruses are removed. have seen this before from other clients we have to clean up, without a full security solution. if you require any more help just email me for more information. thanks GrantReply by from Community Computer Services on Wednesday, 11 May, 2011 - 14:34
Short Answer - Yes. Having AV on the server is only protecting the server and not the rest of your network. If its a business environment I'd avoid using any 'free' products as well. Some of them are OK for your Home PC (just grab MS Security Essentials, it works as advertised) but use some of the bigger names that you can source very cheaply through Donortech such as Symantec Endpoint. Not a huge fan of McAfee or the AVG business versions. When you buy these 'Corporate' versions you normally get the Admin client which will sit on your server, or if you have a number of servers pick one to install the admin client on. This admin client will allow you to deploy the AV product onto all your PC's and laptops from one central point. You can also configure all the settings, arrange groups, scans, see scan results, see which machines haven't been updated, which are infected and all your PC's and laptops will grab their updates from this central server rather than all of them individually connecting and downloading the updates via the net. I'd also recommend a good mail scanning provider. I use Mailguard with all my clients. SPAM is down by about 99% across them all and I can't remember the last time a virus infected email got through. Worth every cent.Reply by tacs on Wednesday, 17 August, 2011 - 12:28
Just getting my head around having dedicated server and workstation security. Would a product like Symantec Protection Suite Small Business Edition be good enough just to run on the servers without needing to purchase workstation security for each of our desktop computers in the office? Or otherwise would a combination of Symantec on the server and a free anti-virus on the desktops be a good combination?

