RE: McAffee vs Sophos

From: Graham Hillstomer (no email)
Date: Tue Apr 01 2003 - 20:00:55 EST


No, I don't use daemonized virus scanners to virus scan high message load servers. Vexira has a nice spooling feature and as mail volume increases so does the virus scanning batches and the per message performance improves. That does not happen with daemonized virus scanners. Also daemonize virus scanner are more prone to cause problems, memory leaks and other not so nice things.

Vexira reinitializes the virus scanner for each batch scan so memory leak and resources issues can only last a few seconds if at all.

You need to check out Vexira Antivirus for mail server (aka Vexira MailArmor)
http://www.centralcommand.com/mailserver_products.html I think you are looking at the file server products.

Going to bed now, good night :-)

Graham

On Tue, 1 Apr 2003 15:37:08 -0800 , "Max Clark" <> wrote:
> I'm assuming that you are using the smtp daemonized version of vexira,
for ppl looking to get into this low cost could you shed some light on
the differences between the workgroup and server command line version?

Thanks,
Max

-----Original Message-----
From:
[mailto:] On Behalf Of Graham Hillstomer
Sent: Tuesday, April 01, 2003 2:41 PM
To: Vivek Khera
Cc:
Subject: Re: McAffee vs Sophos

Hi!

Over the years we have used a lot of different products and some we
built ourselves. I can only tell you on what we use now and why we use
it. We still have and maintain a test lab with many different products
and we test them when they release new versions hoping to find something
even better.

The only product that we have found that can handle huge amounts of mail
effortlessly with little to no problems is Vexira. It has proven to be
*extremely reliable* and cost effective and support is top notch. Sure
you can piece together your own solution but from a commerical
stand-point Vexira is the best for us.

We used to spend 40-60 hours a week maintaining email av across our
customer sites. Then we wrote some monitoring software so we could watch
what was happening more close and reduced it to 20 hours a week but we
never could get below 20 hours since always something would break. It
was envitable for us. A file would cause the virus scanner to peg the
CPU at 100%, it would stop updating for no reason, a file would crash
the scanner, you name it I have dealt with it. The av scanner or some
3rd party app used the av scanner would have a memory leak and cause
problems.

Now with Vexira we expense around 5 min. a week and that is just to look
at some correlated log reports showing when the last updates were
performed, history of av up times, and total viruses stopped so we can
prove that the av is working. I just glace at the reports making sure
that all is fine.

Because of this reliablity we have repurposed our av staff people to
other tasks and now we have just 3 people doing it for 24/7 support, we
used to have 9. I think that says a lot.

Graham

GH> For us in what we do we need more enterprise-class antivirus
GH> services that don't need this much attention.

What then might you recommend? Or have you developed some proprietary
scalable solution you use in house?

-- 
---
Graham Hillstomer II
Senior System Admin *BSD, HP-UX, Solaris
Quality of Service Response Team 
Antivirus Solution Manager / SPAM Control Team Assistant
-- 
---
Graham Hillstomer II
Senior System Admin *BSD, HP-UX, Solaris
Quality of Service Response Team 
Antivirus Solution Manager / SPAM Control Team Assistant







Hosted Email Solutions

Invaluement Anti-Spam DNSBLs



Powered By FreeBSD   Powered By FreeBSD