Best Anti-spyware and Firewall for Business?

[Poppa_Meth]

Anyone who has been on here lately knows I'm helping layout a whole new computer system where I work and have a ton of questions lately. So here is another one.

We'll be running DSL with a router inline but I'd still like to put a decent software firewall on each PC and a good active anti-spyware. I'm currently use to using Kerio personal firewall myself. I want something low on resources but effective, like Kerio We'll already have a low resource corperate version of McAfee anti-virus so I'm looking for a seperate firewall solution. I'm also looking for a good anti-spyware. I see that Ad-aware has a full version that looks like it has active shields ( I haven't had time to look into it in depth) and of course I've heard many good things about Webroot Spy-sweeper. If you can offer opinions on what would be best or any other software suggestions I'd appreciate it.

[Forum Troll]

Does your router have a built-in firewall? That's the best way for that, then install Symantec AntiVirus Corporate Edition. This is what we have where I work, with 1000+ workstations.

[guns1inger]

Firewalls come in all shapes and sizes, epending on what you need, and how secure you want to be. From a simple as zonealarm on every desktop/laptop, through to routers with built-in firewalls, firewall appliances, all the way to up fully firewalled proxy servers.

The main things to look for in any corporate solution is automation of installation and updates, ease of maintenance, and central control if necessary. For anti-virus/anti-spyware solutions, stick the big guns. Symantec, McAfee, Computer Associates. They are geared towards supporting corporate environments where many of the smaller players are not. Most of these have anti-spyware solutions as well. Make sure whatever you look at is fully automated. Your users will not update software on their own.

As for firewalls, I would get a security advisor in if you have more than a few people and serves to protect. The school I service has over 60 desktops and 500 laptops behind the firewall. We have a DSL connection with a router with built-in firewall. Most router firewalls are simplistic, will stop some script-kiddy type attacks, but aren't great protection. They also tend to lack the subtlety in configuration that you will want as you get the hang of protecting a site without completely locking it down. We have an appliance to do our site filtering, running on a subscription basis. We can override the block lists as necessary, without having to maintain the bulk of it ourselves. We also run microsoft ISA server 2004 as our primary proxy and firewall.

Our biggest problem, however, is laptops. Currently, each laptop has etrust anti-virus installed (and updated each time they log onto the network), as well as microsoft defender and windows firewall (all are running XP SP2). The problem with any mobile fleet is that they are not under your control when they go out on the road (be it business trip or just their home network), and when they come back to your network, they connect behind the firewall. So any nasties they pick up can enter your network very easily.

If you are serious about it, get professional advice, especially on the security end. A lot of the serious stuff doesn't get mentioned in blogs, or magazines. They aren't toys for the average user, they are serious kit.

Of course, if it is only for half a dozen people then this is complete overkill. Buy them all Zonealarm or Kerio subscriptions instead.

[kschang]

Barracuda Networks advertises heavily, but their stuff does seem to work. I'd check reviews on their products.

[offline]

Ask a IT expert to run you a hardware based firewall solution with the firewall's corp software package.

[Poppa_Meth]

The router does have a built in firewall. I'd just like an extra layer of protection. We'll have only 3 PCs online and only 4 employies in the whole store. The Tech that is setting the whole register system up doesn't think we need to worry about the spyware/firewall end of it, but I disagree. I've found I need it at home so I'm sure it's a good idea for a business. I'd like to go with Kerio, but at the same time it isn't the most user friendly. I know I'll have people yelling for me every five minutes when it asks them what to do with something. I know ad-aware does have corperate solutions so I'm leaning in that direction for the spyware end of it. Having used ad-aware for a long time I know it does a good job. I guess my main concern is going to be the firewall.

Thanks for all the input. I'll get through this one piece at a time...I hope.

[GKar]

Sunbelt Software might be what you need to look at.

http://www.sunbelt-software.com/CounterSpy.cfm

[whitejremiah]

for that small of a corperate solution, you may as well try something like zone alarm (if they offer a buisness solution, im not sure on that, as i havent touched it in a LONG time......)but from what i remember it's fairly easy, and at least when i used it last, it has an option to completely kill your internet connection....good for when the computers are not in use....

[INFRATOM]

Best free anti-spyware is microsoft, you can be sure they are compatible too. For firewall is from Zone alarm to Sonic wall you name it. My suggestion is not to use you DV computer for normal browsing of internet if you can help it so you can set high security otherwise you would have lots of hastle. Also disable any services you don't need some of those can be used by viruses. make sure you set an admin password better change admin to a different name .. etc turn on windows firewall .. it is a long list
good luck

[INFRATOM]

Sorry was distracted didn't see you wanted it for business. Setup up a tight server don't allow anyone download or install anything. Just browse. Or one of those employee better be an IT person . Keep daily Good backups That is your ultimate last resort. Good Luck

[jimmalenko]

Depending on what surfing requirements you have, you could always just use a .pac file to return a dummy proxy server address if the URL differs from a select list.

We use this for our front counter machines at work (as they only need to get to our intranet, internet site and 3 other 3rd party sites) and it is brutal. What it does is it says if the destination is a, b or c then go "DIRECT" otherwise if it's anything else then try to use "xxx.xxx.xxx.xxx" as a proxy server. You can just put in a dummy IP address and it'll just keep coming up "Page cannot be displayed" if the URL differs from the allowed list.

We also use it for a couple of machines we provide for our customers' free usage of our internet banking. We have locked those machines down to our website and our internet banking software as the only accessible URLs. Any other URL gives a Page cannot be displayed error.

Really depends on what you wish to do.

[MJA]

I'm a fan of AVG. Norton sux.BiG TIME

AVG Anti-Virus Plus Firewall 7.1.362

http://www.download.com/AVG-Anti-Virus-Plus-Firewall/3000-2239_4-10464372.html?tag=lst-0-4

also Sunbelt Kerio Personal Firewall 4.2.3.912 is a very stong firewall

http://www.download.com/Sunbelt-Kerio-Personal-Firewall/3000-10435_4-10487068.html?tag=lst-6-4

[TBoneit]

For Spyware prevention I've had good luck With Spy Sweeper in combination with the free Microsoft Antispyware now Called Windows Defender.

FWIW I use them here at work as a part of my cleaning arsenal of software. In a Thread about Antispyware...

https://forum.videohelp.com/viewtopic.php?p=1467677#1467677

I listed some of what I use but the most us4eful is Spy Sweeper.

Good Luck

[Poppa_Meth]

I think I'm pretty well decided to go with Sunbelt Kerio for the firewall. As for anti-spyware I'm still considering but I'm still leaning toward ad-aware. I just have to research the differences in the multiple versions of it. I'd use MS Anti-spy but every company MS buys that happens to distribute spyware seems to immediately be downgraded in thread priority.