Hey Guys,
I have a network of windows clients with a couple of linux servers for various tasks. What I would like to do is have some form of antivirus on the clients that will log alerts to something on a linux server and store the info in sql. Anybody have any idea on something that can do this?
I tried asking on the securityfocus virus list and I emailed grisoft about their network product. Neither proved fruitful... I want to be able to run my own custom reporting from sql on the fly basically...
Any pointers would be _greatly_ appreciated as even googling doesn't appear to be helping me here...
Thanks, Wayne
Hello Wayne,
I don't think it is exactly what you are looking for, but I'm currently evaluating Computer Associates eTrust Antivirus for use in a quite mixed environment. It works quite good and has something they call "Alert Manager". I haven't had the chance to review all data sinks they provide, but I think they will at least support a user-defined script (which could then insert data into your RDBMs).
They also provide a great Report-Engine which probably already provides most of the reporst you could genereate through your RDBMS.
The only problem - at least for me - is that they currently don't support RHEL 4 (which will change in the next release).
Oh... and just to mention it: it only costs about $ 40 per license, no matter what system it shall run on (Windows 95-2003, Linux/i386, Linux/390, HP-UX, MacOS X, Netware) and what options (i.e. MS-Exchange and/or Novell Groupwise Scanner) you need.
Regards, Andreas
Hi Andreas,
Sounds like it might do the trick, Ill check it out will probably have to wait for the next release for a roll out so it supports centos 4, just a quick question.. On your last point, I can run a single license @ $40 to scan emails? Its usually per user when you do that isnt it with most products..
Thanks, Wayne
On 25/08/2005 22:33, "Andreas Rogge" arogge@gmx.de wrote:
Hello Wayne,
I don't think it is exactly what you are looking for, but I'm currently evaluating Computer Associates eTrust Antivirus for use in a quite mixed environment. It works quite good and has something they call "Alert Manager". I haven't had the chance to review all data sinks they provide, but I think they will at least support a user-defined script (which could then insert data into your RDBMs).
They also provide a great Report-Engine which probably already provides most of the reporst you could genereate through your RDBMS.
The only problem - at least for me - is that they currently don't support RHEL 4 (which will change in the next release).
Oh... and just to mention it: it only costs about $ 40 per license, no matter what system it shall run on (Windows 95-2003, Linux/i386, Linux/390, HP-UX, MacOS X, Netware) and what options (i.e. MS-Exchange and/or Novell Groupwise Scanner) you need.
Regards, Andreas
CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
1 - they undoubtedly sell a specific license for an email server
2 - they probably send it off to ingres (that is their db and they evidently have open sourced it now - postgreSQL was a fork of the same db I think)
Craig
On Fri, 2005-08-26 at 01:29 +0100, Wayne wrote:
Hi Andreas,
Sounds like it might do the trick, Ill check it out will probably have to wait for the next release for a roll out so it supports centos 4, just a quick question.. On your last point, I can run a single license @ $40 to scan emails? Its usually per user when you do that isnt it with most products..
Thanks, Wayne
On 25/08/2005 22:33, "Andreas Rogge" arogge@gmx.de wrote:
Hello Wayne,
I don't think it is exactly what you are looking for, but I'm currently evaluating Computer Associates eTrust Antivirus for use in a quite mixed environment. It works quite good and has something they call "Alert Manager". I haven't had the chance to review all data sinks they provide, but I think they will at least support a user-defined script (which could then insert data into your RDBMs).
They also provide a great Report-Engine which probably already provides most of the reporst you could genereate through your RDBMS.
The only problem - at least for me - is that they currently don't support RHEL 4 (which will change in the next release).
Oh... and just to mention it: it only costs about $ 40 per license, no matter what system it shall run on (Windows 95-2003, Linux/i386, Linux/390, HP-UX, MacOS X, Netware) and what options (i.e. MS-Exchange and/or Novell Groupwise Scanner) you need.
Regards, Andreas
CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Am Freitag, den 26.08.2005, 01:29 +0100 schrieb Wayne:
Hi Andreas,
Sounds like it might do the trick, Ill check it out will probably have to wait for the next release for a roll out so it supports centos 4, just a quick question.. On your last point, I can run a single license @ $40 to scan emails? Its usually per user when you do that isnt it with most products..
Hi Wayne,
i was wondering, too. But my local OEM (located in Germany) told me that I don't have to buy an extra-license for our Exchange-Server. So whatever, I think we will buy it and I can probably tell you more when we've bought the licenses :)
Hi Andreas,
Yeah if you remember when you get the licenses that would be great, sorry about mailing you offlist about grisoft, just that it came into a different account and I thought you might be interested.
For the rest of you guys grisoft said that they have a database version that can run on linux that logs to a database below is the email they sent.. Nice to be able to have a choice on Linux...
Dear Sir/Madam,
Thank you for your email.
AVG Admin (which is Remote Administration console) can be run just from Windows, however the AVG DataCenter (database) and AVG TCP Server can run on a linux server and all windows clinets can be connected to database through AVG TCP Server. I recommend reading the documentaion for linux TCP Server (http://www.grisoft.cz/softw/70/filedir/doc/AVG_Linux_TCP_Server/User_manual /avg_lts_uma_en_70_6.pdf)
I also recommend documentation for Remote Adminstration, please see http://www.grisoft.com/doc/Documentation
Best regards,
Daniel Svojanovsky AVG Technical Support
website: http://www.grisoft.com mailto: technicalsupport@grisoft.com
On 28/08/2005 20:00, "Andreas Rogge" arogge@gmx.de wrote:
Am Freitag, den 26.08.2005, 01:29 +0100 schrieb Wayne:
Hi Andreas,
Sounds like it might do the trick, Ill check it out will probably have to wait for the next release for a roll out so it supports centos 4, just a quick question.. On your last point, I can run a single license @ $40 to scan emails? Its usually per user when you do that isnt it with most products..
Hi Wayne,
i was wondering, too. But my local OEM (located in Germany) told me that I don't have to buy an extra-license for our Exchange-Server. So whatever, I think we will buy it and I can probably tell you more when we've bought the licenses :) _______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
-
Andreas Rogge -
Craig White -
Wayne