Thursday, January 24, 2013

Managed Antivirus Only Deployments - Setup


Managed Antivirus (or MAV) can be deployed through GFI MAX to clients that want only antivirus.  By following the information below you can use just the antivirus for your clients and be charged only for antivirus.
 ATTENTION!  If the system is not set correctly beforehand additional charges may apply.  Read our article "Naked" MAV Setup regarding what NOT to turn on so you are not charged anything additional.  Once the system is set correctly, simply follow the steps below to create a MAV only deployment.




MAV Only Steps:

1.       Create template with zero checks
a.       Under SETTINGS : MONITORING INSTALLATION TEMPLATES : MANAGE TEMPLATES
b.      Select ADD
c.       Add a server template and a workstation template with a naming convention of your choice (i.e. MAV Only, Only MAV, etc.)
Click to enlarge
d.      Do not change the 24x7 frequency as this will incur additional charges
e.      Do not add any checks at all
f.        Close and save the Template
2.       Create Client/Site
a.       Under FILE : NEW CLIENT
b.      Add a site for the client under FILE : NEW SITE (i.e home office, locations, etc.)
3.       Edit Client/Site for new template
a.       Highlight the new SITE for MAV only and select EDIT : EDIT SITE
b.      From the GENERAL SETTINGS TAB change the “Default Workstation Monitoring Installation Template” and the “Default Server Monitoring Installation Template” to the newly created MAV only template
Click to enlarge
4.       Turn on MAV for Client/Site
a.       Under SETTINGS : MANAGED ANTIVIRUS : SETTINGS
b.      Expand the tree to your client and site (workstations and servers) that will accept MAV only and turn the setting to “On”.
c.       Be sure to review your Protection Policies that you are applying
5.       Deploy Agent
a.       Under the AGENT menu deploy the monitoring agent as you deem necessary (i.e. Download Agent, Download Site Installation Package)
6.       Check status of deployment on Summary Tab
a.       Once the agent checks into your dashboard there is a tab called SUMMARY tab in the lower right quadrant of the dashboard.  Here you will see a summary if the machine needs a reboot, another antivirus was detected preventing MAV from deployment and so on.
Click to enlarge
7.       Adjust deployment as needed (reboot, remove antivirus, another reboot, etc.)
a.       From the information on the summary tab adjust the deployment as needed

8 comments:

  1. Looks like there needs to be some stuff in here about making sure that your are not inheriting other settings from parent like patch management and Take control.

    ReplyDelete
    Replies
    1. You bet! That info is in the "Naked MAV" article referenced in the first paragraph.

      Delete
  2. Hi Todd

    Should we be worried if a client has MAV but has no virus scanner on their mail server?

    Rob

    ReplyDelete
    Replies
    1. Well, I have to answer that in true IT Support fashion: IT DEPENDS. :) There's a long history of arguing whether or not email A/V is actually necessary or not, and I don't want to incite it here.

      I think you could "expand" the argument however to one that is SECURITY (vs. "just" A/V). And most folks think that some type of layered approach best addresses most network's security concerns. What those layers "look like" or are comprised of *depends* (there's that word again!) on the environment, the client industry, and the data being protected. But typically, you don't want to put multiple layers in one place: so no email scanning on the end-point, but rather somewhere "up the line" such as the client email server, or a gateway to that server.

      Is that an an answer without an answer? :)

      Delete
    2. Reversed please. No AV on server but yes on EndPoints since client can be configured to pull from many sources/email servers. You want to see your Exchange crawl?...install AV and go have a lunch.
      Up the line...totally, gateway + your smtp queue in say MailEssentials ;)

      But yeah mac vs. pc

      Delete
  3. Todd, how do I convert naked MAV people to "fully-clothed?" lol Got a client that I'm switching over to standard monitoring...

    ReplyDelete
  4. Thanks for the good advice. But before installing some of the anti-virus programs, check the system requirements because any anti-virus application make your device slower for 10-30%. So before installing some better look for some guides about it. I want to advise you one great website with a lot of different guides about using of anti-virus programs on different OS and devices. Here is the link http://removalbits.com/

    ReplyDelete
    Replies
    1. Thank you Alfred. That seems like a decent reference.

      Delete