Date: Fri, 27 Jul 2012 12:47:29 +0100 From: Daniel Bye <freebsd-questions@slightlystrange.org> To: freebsd-questions@freebsd.org Subject: Re: On-access AV scanning Message-ID: <20120727114729.GC4834@catflap.slightlystrange.org> In-Reply-To: <alpine.DEB.2.00.1207270715360.9614@nber9.nber.org> References: <20120727104308.GA4834@catflap.slightlystrange.org> <alpine.BSF.2.00.1207271249160.20428@wojtek.tensor.gdynia.pl> <20120727110019.GB4834@catflap.slightlystrange.org> <alpine.DEB.2.00.1207270715360.9614@nber9.nber.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--2/5bycvrmDh4d1IB
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Fri, Jul 27, 2012 at 07:19:45AM -0400, Daniel Feenberg wrote:
>=20
>=20
> On Fri, 27 Jul 2012, Daniel Bye wrote:
>=20
> >On Fri, Jul 27, 2012 at 12:51:04PM +0200, Wojciech Puchar wrote:
> >>>Are there any current options available to support on-access antivirus
> >>>scanning on FreeBSD?
> >>>
> >>FreeBSD doesn't need this as there are no viruses on that system.
> >
> >Well, thanks.
> >
> >>
> >>>And yes, I know that neither FreeBSD nor Solaris are renowned for their
> >>>sickly vulnerability to viruses, but we operate in a mixed environment=
, with
> >>>a lot of Windows machines and ZFS file systems exported by SMB/CIFS, s=
o we
> >>>need the AV to ensure any viruses are stopped before they infect a
> >>>susceptible machine. It seems a small price to pay to finally get a d=
ecent
> >>>workstation!
> >>No idea - YOU will not spread wiruses, and viruses from other
> >>winstations will not affect you.
> >>
> >>so just install antivirus software on winstations.
> >>
> >>Or finally educate users as it is really simple to avoid viruses
> >>even with windows
> >
> >I refer you to the part where I specifically talk about our corporate IT
> >policy. All desktops/workstations (that is, all of them, every single on=
e),
> >must have AV software running on them. There will be no exceptions, on p=
ain
>=20
> Well, there is AV software for FreeBSD - we use Kaspersky on our
> FreeBSD based mailserver, but the viruses it looks for are Windows
> viruses. I don't know if that will satisfy your IT policy. Maybe you
> should be looking at Cygwin? Or, can FreeBSD run under HyperV?
Thanks, Daniel. I have looked at Kaspersky, and various others, but the main
sticking point, as I see it, is that there is no on-access scanning
capability in any of the AV packages available for FreeBSD. It's not
essential to build my case, but it would certainly strengthen it. I use
ClamAV on my home mail server, and it works well. I have also tested it out
on a desktop machine to run on-demand scans, and it works just fine, and
doesn't impose so much of a load as to be a nuisance.
We have had a couple of virus outbreaks recently, so this is quite a high
profile concern around here at the moment. The CIO is from a technical
background, so I might well be able to convince him of FreeBSD's strengths
as a very secure system, but I will still need to accede to the IT policy,
sadly - no way around it.
Dan
--=20
Daniel Bye
_
ASCII ribbon campaign ( )
- against HTML, vCards and X
- proprietary attachments in e-mail / \
--2/5bycvrmDh4d1IB
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (FreeBSD)
iEYEARECAAYFAlASf9EACgkQixf5fBYiFmoWAACfSKFXaGR9uZuylcUNRv4fwZKK
u9oAnjbEr5syxNn5TaXP2ikAPZuUYH/R
=lsnv
-----END PGP SIGNATURE-----
--2/5bycvrmDh4d1IB--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20120727114729.GC4834>