{"id":1659,"date":"2011-02-01T15:07:11","date_gmt":"2011-02-01T09:37:11","guid":{"rendered":"https:\/\/www.qadit.com\/blog\/?p=1659"},"modified":"2011-02-01T15:07:11","modified_gmt":"2011-02-01T09:37:11","slug":"evaluation-of-anti-virus-software-some-commonly-used-criteria","status":"publish","type":"post","link":"https:\/\/qadit.com\/blog\/evaluation-of-anti-virus-software-some-commonly-used-criteria\/","title":{"rendered":"Evaluation of Anti-Virus Software-Some Commonly Used Criteria"},"content":{"rendered":"<p>Here is a list of commonly used evaluation criteria for anti-virus software<\/p>\n<ul>\n<li>\u2022 Ability to produce new virus signatures quickly<\/li>\n<li>\u2022 Dispersed\/distributed manageability<\/li>\n<li>\u2022 Unified client features<\/li>\n<li>\u2022 Client transparency<\/li>\n<li>\u2022 Support for all Windows OSes and Linux<\/li>\n<li>\u2022 Web-based management console<\/li>\n<li>\u2022 Company strength and overall AV strategy<\/li>\n<li>\u2022 Ability to integrate with other solutions such as Cisco NAC<\/li>\n<li>\u2022 Proactive notification on potential outbreaks and\/or problems<\/li>\n<li>\u2022 Ability to clean up after viruses and\/or spyware have infected a system<\/li>\n<li>\u2022 Ability to quickly prevent outbreaks while new virus signatures are not yet available<\/li>\n<\/ul>\n<p>Each of the above criteria has been explained further<\/p>\n<p><strong>Ability to Produce New Virus Signatures Quickly<\/strong><\/p>\n<p>The period between when a virus is discovered \u201cin the wild\u201d and when a signature or pattern file is available for clients is extremely critical. The longer it takes to get and distribute new pattern files, the more likely it is to have clients getting infected.<\/p>\n<p><strong>Dispersed\/Distributed Manageability<\/strong><\/p>\n<p>The ability to provide Unit Computing Specialists and\/or departmental administrators access to manage their own clients was also an important feature. With the diversity in departmental IT policies, it is necessary to be able to give people the ability to set policies for their department differently than\u00a0 what is defined at the global level. Furthermore, departments need the ability to provide customized reports on systems under their control to their management.<\/p>\n<p><strong>Unified Client Features<\/strong><\/p>\n<p>The ability for client software to provide antivirus, anti-spyware, SPAM filtering, and firewall support in a single package was very high on the list of requirements. Packaging all of these features together under a single client not only reduces desktop and system tray clutter but typically takes up fewer system resources in terms of CPU and memory.<\/p>\n<p><strong>Client Transparency<\/strong><\/p>\n<p>Another aspect that to consider is how the client itself performed while a system was under heavy usage. Real-time scanning and monitoring needed to be as unobtrustive as possible. This also meant that any error messages or warnings that popped up as viruses were found needed to be easy to understand and answer. It was very important that the client be as transparent and easy to use as possible to users.<\/p>\n<p><strong>Support for mulitple OSes<br \/>\n<\/strong><\/p>\n<p>If there are a variety of operating systems is use it is important that any solution support the full range of Windows operating systems from Windows XP and2003 all the way back to Windows 98 and Windows 95. In addition, adding support for protecting the growing number of Linux desktops and servers may also be required.<\/p>\n<p><strong>Web-Based Management Console<\/strong><\/p>\n<p>Enterprise management tools needed to be web-based for ubiquitous access. Not all system administrators run Windows on their desktop, so use of a Windows client-based management system is not desired in our environment. Furthermore, the console needed to be able to provide granular control over systems being managed.<\/p>\n<p><strong>Company Strength \/ Overall AV Strategy<\/strong><\/p>\n<p>Another factor in selecting an antivirus solution is how strong the company itself was. Fiscally weak or unsound companies tend to get bought out by larger corporations who may then change the levels of service a product provides even during a contract.The availability of technical support for the anti-virus software is also relevant here. This particularly the case when using free anti-virus software.<\/p>\n<p><strong>Ability to Integrate with Other Solutions<br \/>\n<\/strong><\/p>\n<p>Network security is another area of focus when selecting an antivirus solution. The ability of a solution to integrate with third party solutions such as Cisco\u2019s Network Solution. It is therefore essential that anti-virus solution be able to integrate with the existing network infrastructure.<\/p>\n<p><strong>Proactive Notification of Potential Outbreaks and\/or Problems<\/strong><\/p>\n<p>Limited human resources means that continuous monitoring of the system may not be possible. Therefore, it is critical that any solution be able to watch systems and automatically notify system administrators of possible outbreaks or issues on the network. The ability to email or page an administrator or administrators when there appears to be an anomaly on the network should be considered.<\/p>\n<p><strong>Ability to Clean Up after Viruses and\/or Spyware<\/strong><\/p>\n<p>Obviously another factor that must be considered when evaluating antivirus solutions is how well the product is able to clean a system after an infection. If a solution simply detects a virus but doesn\u2019t clean it up well, it doesn\u2019t really save an administrator any time or effort. The solution should be able to successfully clean a majority of infections without having to rebuild the system.<\/p>\n<p><strong>Ability to Prevent Outbreaks Until New Virus Signatures Are Available<\/strong><\/p>\n<p>Many vendors have begun to discuss \u201czero-day\u201d protection, but few actually do much about it. The ability to prevent an outbreak from occurring when there is no virus signature or pattern file available is extremely important. Hundreds of systems could potentially become infected in the time it takes a virus to be detected \u201cin the wild\u201d to the time a new pattern is available. A feature considered key was the ability for software to keep systems protected even though they were unable to detect the virus.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Here is a list of commonly used evaluation criteria for anti-virus software \u2022 Ability to produce new virus signatures quickly \u2022 Dispersed\/distributed manageability \u2022 Unified client features \u2022 Client transparency \u2022 Support for all Windows OSes and Linux \u2022 Web-based management console \u2022 Company strength and overall AV strategy \u2022 Ability to integrate with other &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/qadit.com\/blog\/evaluation-of-anti-virus-software-some-commonly-used-criteria\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Evaluation of Anti-Virus Software-Some Commonly Used Criteria&#8221;<\/span><\/a><\/p>\n","protected":false},"author":5,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false},"version":2}},"categories":[1],"tags":[],"class_list":["post-1659","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p9AH7Q-qL","_links":{"self":[{"href":"https:\/\/qadit.com\/blog\/wp-json\/wp\/v2\/posts\/1659","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/qadit.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/qadit.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/qadit.com\/blog\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/qadit.com\/blog\/wp-json\/wp\/v2\/comments?post=1659"}],"version-history":[{"count":0,"href":"https:\/\/qadit.com\/blog\/wp-json\/wp\/v2\/posts\/1659\/revisions"}],"wp:attachment":[{"href":"https:\/\/qadit.com\/blog\/wp-json\/wp\/v2\/media?parent=1659"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/qadit.com\/blog\/wp-json\/wp\/v2\/categories?post=1659"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/qadit.com\/blog\/wp-json\/wp\/v2\/tags?post=1659"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}