Re: AV - Full scans or On Access Scans

[Mike Hanson <MHanson () CSS EDU>]

David,

Our A/V (Symantec) runs "on Access". We run twice weekly anti spyware
scans with a separate product (Webroot) over lunch hour. We do not have
Webroot run "on Access".

The A/V scan is just too intrusive to run while people are trying to
work.



Mike Hanson
Network Security Manager
The College of St. Scholastica
Duluth, MN 55811

(218)-723-7097
mhanson () css edu


> > > "David A. Batastini" <DavidB () URI EDU> 4/9/2008 2:58 PM >>>
All,

                I'm trying to get the pulse of what other educational
institutions are doing when it comes to managing AV scans on endpoints.
Do
you schedule full system scans or do you rely on the "on Access" scans
to
detect malware? If you run full system scans: how often, and what time
are
they set to run? If you do not run full system scans,  how do you
mitigate
the security risk of new malware ( malware that AV did not detect
during the
initial on access scan)?

As you can probably guess, I'm getting negative feedback on the
intrusive
behavior  of our complete system scans. In the past year, we've cut
the
frequency in half (from weekly to bi weekly) and randomized the time to
try
to lessen the impact. Anyone have any success stories they're willing
to
share?



Thanks in advance,

David



--

David Batastini, GCIH

University of Rhode Island

Information Security



DavidB<at>uri.edu

015 Tyler Hall

p. (401) 874-2663

c. (401) 265-5515

f. (401) 874-7004