small business IT mags - computer security software recommends?

[SchralphMacchio]

I need to evaluate, purchase, and install computer security software that will primarily be used for antivirus, firewall, and spyware protection. Any mags have advice?

I work in a very small business - by the summer time we'll have about 10 computers in our office, most of which will be laptops. Almost all of our computers will be Windows XP Pro, though some will be Linux. We have a decent firewall but not a real network appliance that can do all kinds of awesome detection & protection on the front end. With having laptops that will go home and into the field, some with VPN access back to part of our network, there is basically a lot less control in this environment. I'm sure many of the mags here have similar setups.

Like I said before, I need antivirus, firewall, and spyware functionality out of the software. Data backup is a bonus but not necessary. Our email host is taking care of spam and e-mail viruses on their end of it.

It seems that most of the review info out there on teh interwebz is for consumer software or enterprise software like the stuff I used to use, but there is not much info for small businesses/offices.

This is what I want:
-light footprint - not a memory or drivespace hog
-configurable, but not super complex
-stable and not difficult to install
-possibility of over-the-network configuration, or at least status monitoring (virus definitions installed, any incidents occurred, etc.)
-updates released relatively frequently

I'd appreciate any recent experiences or recommends. I had to qualify that statement with the word 'recent,' since things change pretty quickly in this field.

Two other disclaimers are that I've had pretty shitty experiences with Symantec and Microsoft One Care with regard to system resources. Both pieces of software have seemed like unstable resource hogs to me, so I'm leaning against them. However, I'll listen to any well-versed argument about their merits.

So far I'm looking at:
McAfee Total Protection for Small Businesses
Sophos Computer Security Suite for Small Businesses
ESET Smart Security
F-Secure Client Security

Thanks mags as always for the bright ideas.

[summit]

If you allow your users pretty open access to teh intranetz, you had better be running multiple antispyware programs.

We are using McAfee VirusScan Enterprise 8 for antivirus/malware... pretty nontroublesome and easy to manage. It stops the threats but is not always effective at removal
We use AdAware Plus for Spyware/Adware
I also run Spyware S&D on problem systems
Hardware Firewall, ZoneAlarm on the server, Microsoft Firewall on the clients
Server 2003 with 40 XPP clients and one Vista user

I've heard good things about Computer Associates antivirus www.ca.com I think they have full bundled packages

[SchralphMacchio]

I've heard good things about Computer Associates antivirus www.ca.com

Every time I see that name, I still laugh and marvel that they are still in business. They might be a decent product now, but I remember in 1999 that they were really bad. We used to make fun of their AV software, and I think they almost went bankrupt one time? I haven't been in touch with the IT world for many years, so I can't remember the specifics, but I did find this:
http://www.businessweek.com/magazine...7/b3960089.htm

Thanks for the other notes Summit. I used to use VSE with EPO when it was first released for a decently sized network of about 800 desktops. McAfee VirusScan 4 was a pretty bad piece of software back in the day too, and 6 was only marginally more stable, though amazingly when 7 came out it was incredibly stable and much lighter weight than the competitors.

[RShea]

Do you want a software only defense? If so since you have both Windows and Linux, you probably want Anti-virus/firewall/antispyware/etc that works for both OS's. Kaspersky usually gets high ratings on AV-Comparatives.org reviews. Also AVG has packages for both OS's. Nod from Eset is another that has some loyal followers. I'd stay away from McAfee personally (though their server package that is based on the Network Associates is a little better and not the same as McAfee home package)

Linux is much less of a target, and some do not protect their Linux systems (like Mac's too are considered not a target and not in need of protection).

If you want hardware - software combo- then I'd take an old computer system, download and install the IPCop or m0n0wall or PFSense on an old Pentium II or 3 system and use the VPN add-ons available. Then run the Windows PC's with a standard security suite like mentioned above.

[Magnus_CA]

Thumbs up to Trend Micro.

Easy implementation, small footprint, stable, and perfect for mobile clients. We use them exclusively for client anti-virus and mail a/v. My company supports about 2 dozen clients.

[SchralphMacchio]

Do you want a software only defense? If so since you have both Windows and Linux, you probably want Anti-virus/firewall/antispyware/etc that works for both OS's. Kaspersky usually gets high ratings on AV-Comparatives.org reviews. Also AVG has packages for both OS's. Nod from Eset is another that has some loyal followers. I'd stay away from McAfee personally (though their server package that is based on the Network Associates is a little better and not the same as McAfee home package)

Linux is much less of a target, and some do not protect their Linux systems (like Mac's too are considered not a target and not in need of protection).

If you want hardware - software combo- then I'd take an old computer system, download and install the IPCop or m0n0wall or PFSense on an old Pentium II or 3 system and use the VPN add-ons available. Then run the Windows PC's with a standard security suite like mentioned above.

Know anything about the Kaspersky or Eset remote admin functions? Also yes I meant the Network Associates corporate software, the home stuff was crap when I did IT stuff, and I'm guessing it hasn't changed much.

We've got a Smoothwall server that is doing our firewall and VPN, but I have no idea how to integrate antivirus and other threat protection onto that thing. We're eventually hiring an IT guy, but for now we're kind of limping along and I'm a crutch.

[RShea]

As for the Kaspersky and Eset Nod management, I have not personally installed and implemented them on servers or a managed implementation. I have run and tested each of their desktop anti-virus clients.

As for implementing the anti-virus on the Linux firewall, there are 2 schools- one that a firewall should be just that- only a firewall with port blocking etc. However at least for IPCop there are a number of 3rd party add-ons including Clam-AV that can be loaded. Smoothwall and IPCop are based on the same code (but split some time and a few versions back and now are developed separately)

Looks like Smoothwall supports the 3rd party DansGuardian (which IPCop does too) and another option called Smoothzap on their site. It would not be a single protection that in my opinion would be the only solution (since the laptops are going to be out of the office) but another layer to protect and scan email before the end-users read the messages in their mail client.

[SchralphMacchio]

Many thanks for the info RShea

Magnus, thanks for adding a data point on Trend. I have always had mixed thoughts about them but never anything too negative. I will put that on the list as well.

Unfortunately, with Kaspersky and Trend added to the list now I have 6 pieces of software to evaluate. I think it's going to come down to the user interface at the client level and at the remote management level.

[SchralphMacchio]

Many thanks for the info RShea

Magnus, thanks for adding a data point on Trend. I have always had mixed thoughts about them but never anything too negative. I will put that on the list as well.

Unfortunately, with Kaspersky and Trend added to the list now I have 6 pieces of software to evaluate. I think it's going to come down to the user interface at the client level and at the remote management level.

[JBrian]

x2 for Trend Small Business Server - remote monitoring and deployment, runs great on a domain, not so great on a workgroup but no big thang if it's a small net.

Add in a linux/*BSD box running Snort if you're noided.

[Duffman]

anyone use Norton Enterprise Edition? we are deploying two Windows 2003 R2 Servers / SQL servers at work. This was recommended by our IT consultant, but I have heard bad things about Norton in the past.