[Mimedefang] Which antivirus?

[Kevin A. McGrail]

David & James:

I disagree with James but not for technical reasons.  The choice of McAfee 
for me is typically decided by the "Cover Your A**" (CYA) Doctrine ;-).

Customers/Employees/Bosses who get a virus will demand that you make best 
efforts to get rid of viruses and unfortunately ClamAV hasn't gotten much 
trade press.

Therefore, using McAfee is using a brand name that has worldwide acceptance 
and is #2 in the US for Anti-viral software.  Since I also recommend 
Symantec's Corporate Edition for Servers/Desktops (#1 in the US), we are 
then using the #1 & #2 Commercial software and ClamAV (the best Open Source 
anti-viral software).

Over the past year, with the use of bad_filename and Archive::Zip testing, 
we haven't seen a single virus get farther than our first line of defense 
because most of them have seemed to exploit zip, exe's and pifs in the last 
year and the others have been variants that heuristically haven't been that 
hard to identify.

So, if the responsibility is ALL yours, I recommend MD with bad_filename 
(and the really_bad_filename extrapolation I wrote helps too) & ClamAV. 
It's free and very well done.  If you have to answer to anyone, I suggest 
McAfee.  It's the leading product available for most unix platforms and the 
product pricing is quite inexpensive.

Regards,
KAM
----- Original Message ----- 
From: "James Ebright" <jebright at esisnet.com>
To: <mimedefang at lists.roaringpenguin.com>
Sent: Tuesday, March 22, 2005 9:24 AM
Subject: Re: [Mimedefang] Which antivirus?


> We have had zero isues with f-prot, it is well supported and not a 
> resource
> hog. Definitions come out pretty much the same time or before most people 
> will
> see it from Symantec (Norton AV), and since we check often from a cron 
> job, we
> ususually get the updates long before our customers.
>
> http://www.f-prot.com/
>
> Anyway, just our experience.
> Jim
>
> On Tue, 22 Mar 2005 13:14:07 +0100, Administrador DyR wrote
>> Hi all.
>>
>> At my firm we have a MIMEDefang installation with SA, ClamAV and McAfee
>> uvscan.
>>
>> The license of McAfee is about to expire. I trust almost completelly
>> in clamav, but we want to use another aditional antivirus for
>> contrast results.
>>
>> Before upgrading McAfee/NAI license, after reading last-weeks
>> messages about uvscan's bad documentation and/or reliability, I
>> would like to know your opinions about the different commercial
>> antivirus currently supported by MIMEDefang, thinking about new-
>> virus reactness, signature upgrading, reliability, Linux support,
>>  and price...
>>
>> Thank you for your opinions.
>>
>> --
>> David Marin Carreño <dmarin at dyr.es>
>> Desarrollo y Recursos, S.L.

>