Not sure if this is the area to raise this, but I am not impressed
with the latest anti-virus roll out.  We are a smartnet school
(Ministry recommended) and now I am trying to find a solution to
installing symantec AV "for schools" onto our linux server to
distribute to our windows machines.  It seems that either I install
every machine unmanaged and use all of our internet traffic up each
month on AV signatures or i purchase a windows server platform and run
it concurrently with smart-net just to run anti-virus.  I'm not sure
the Ministry thought very hard about this one.  I have contacted smart-
net, who say to contact ICT help desk, who say to contact symantec.  i
am very frustrated.
craig

I am very dissapointed with the ministry's choice. We have a windows setup
and sadly have spent many hours trying to resolve issues with symantec
software. Both the ICT Helpdesk and Symantec are failing badly.
We are now looking at other options for antivrus software.

Cheers
--
Terry Cole
Western Heights High School
Rotorua, New Zealand.
Phone: 07 349 5940 ext 791
DDI: 07 349 5950
Mobile: 022 0TERRYC (022 083 7792)
mailto:tc...@whhs.school.nz
http://www.whhs.school.nz

--
--------------------------------------------------------------
         This email was sent using Telecom SchoolZone.
                    www.schoolzone.net.nz

This email has been scanned for viruses by Telecom SchoolZone,
but is not guaranteed to be virus-free.
--------------------------------------------------------------

I agree with Craig.  We are in the same situation at Lyall Bay School.  MOE
recommended that we go to a Smart Net server - then provide anti-virus that
will not work on the linux server as described.  Surely, because they
decided that Symantec was the best solution for us,  MOE should fix this
issue rather than expect individual schools to do the donkey-work.

Dennis Thompson
Lyall Bay School

Two things annoyed me:

1.  SEPM literally uses the computer's internet settings.  So despite
allowing direct outbound access to get updates because these are not set as
proxy exceptions in the internet settings area the access fails.  Thus it is
easier to use the proxies to get updates.

2.  The instructions on how to use the proxies automatically are overly
complicated.  This page contains the instructions for how to do it on a MAC:

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/200406021...

But I found this to be easier:

start the Terminal program.  Type:

sudo pico /etc/liveupdate.conf

and press return

enter the OS X admin password for the computer, press return, then add these
three lines:

proxy=172.31.232.250:3128
proxyusername=someusername
proxypassword=somepassword
Next press Ctrl-O (Write-Out), then Ctrl-X (Exit)

LiveUpdate then works when it is next run.

Ideally on a MAC you could do this with a GUI but stunningly you can't!

The same fix might work in Linux in general - seeing as OS X is just a
variant of Linux I can't see why it should not.

3.  Firewall.  I've also found the firewall side difficult.  Eg try setting
up  a "homenetwork" with Windows 7 - this will be something that schools
want to do in a peer-peer setting in smaller school for sharing printers
etc.  The firewall blocks it and so far I've had to disable the firewall to
make it work.

Quite a few schools have asked me direct questions on how to get things
working because they have had no joy from the ICT Help Desk.  It seems wrong
that ICT Help Desk should refer people to Symantec for support given that
they have been supplied with training on how to use things.

regards,

Tim Harper

Phone 0800 755 966 option 2 then 3 (SchoolZone)
Phone 03 443 5167 (DDI)
Mobile 027 617 9968
Fax 03 443 9900

t...@mtaspiring.school.nz
www.mtaspiring.school.nz

2009/11/3 Terry Cole <tc...@whhs.school.nz>

Hi all,

I was wondering when this would start. The new antivirus set up is terrible.

We are a school with two servers, 140 computers and have taken 3 days of
intense work to deploy Symantec.

Finally it goes but not as we want it.

It was suggested that we install it on a weekend when there was no computer
use.

We started to install it on a Saturday - Ever tried to get the ICT help desk
on a weekend?

The Teacher cloned laptops were a curse to migrate to, something to do with
the cloning and educator as the first user. We have struck this with WSUS as
well.

The management console did not work to send the programme out.

We had to use the migration utility and then identify each computer by its
individual ISP number, not its name.

Each computer then needed to have in-putted their current user name and
password.

We had to change each computers file default setting as well.

In some computers it did not remove CA.

It turns off our windows defender.

From what we can see on a managed platform it will only scan for one time
setting for all computers.

With Ca we had servers scanned at night and other groups during their down
time.

With unmanaged computers to download we need to put in our proxy password
each time, something CA handled for us in the setup.

Not a good situation. We are pretty good with ICT and networks, heaven help
schools that aren't.

Peter Fitzgerald.

From: mle-reference-group@googlegroups.com
[mailto:mle-reference-group@googlegroups.com] On Behalf Of Tim Harper
Sent: Tuesday, 3 November 2009 1:35 p.m.
To: mle-reference-group@googlegroups.com
Subject: [MLE] Re: Anti-Virus Solution

Two things annoyed me:

1.  SEPM literally uses the computer's internet settings.  So despite
allowing direct outbound access to get updates because these are not set as
proxy exceptions in the internet settings area the access fails.  Thus it is
easier to use the proxies to get updates.

2.  The instructions on how to use the proxies automatically are overly
complicated.  This page contains the instructions for how to do it on a MAC:

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/200406021...

But I found this to be easier:

start the Terminal program.  Type:

sudo pico /etc/liveupdate.conf  

and press return

enter the OS X admin password for the computer, press return, then add these
three lines:

proxy=172.31.232.250:3128
proxyusername=someusername
proxypassword=somepassword
Next press Ctrl-O (Write-Out), then Ctrl-X (Exit)

LiveUpdate then works when it is next run.

Ideally on a MAC you could do this with a GUI but stunningly you can't!

The same fix might work in Linux in general - seeing as OS X is just a
variant of Linux I can't see why it should not.

3.  Firewall.  I've also found the firewall side difficult.  Eg try setting
up  a "homenetwork" with Windows 7 - this will be something that schools
want to do in a peer-peer setting in smaller school for sharing printers
etc.  The firewall blocks it and so far I've had to disable the firewall to
make it work.

Quite a few schools have asked me direct questions on how to get things
working because they have had no joy from the ICT Help Desk.  It seems wrong
that ICT Help Desk should refer people to Symantec for support given that
they have been supplied with training on how to use things.

regards,

Tim Harper

Phone 0800 755 966 option 2 then 3 (SchoolZone)
Phone 03 443 5167 (DDI)
Mobile 027 617 9968
Fax 03 443 9900

t...@mtaspiring.school.nz
www.mtaspiring.school.nz

2009/11/3 Terry Cole <tc...@whhs.school.nz>

I am very dissapointed with the ministry's choice. We have a windows setup
and sadly have spent many hours trying to resolve issues with symantec
software. Both the ICT Helpdesk and Symantec are failing badly.
We are now looking at other options for antivrus software.

Cheers
--
Terry Cole
Western Heights High School
Rotorua, New Zealand.
Phone: 07 349 5940 ext 791
DDI: 07 349 5950
Mobile: 022 0TERRYC (022 083 7792)
mailto:tc...@whhs.school.nz
http://www.whhs.school.nz <http://www.whhs.school.nz/>

--

--------------------------------------------------------------
        This email was sent using Telecom SchoolZone.
                   www.schoolzone.net.nz <http://www.schoolzone.net.nz/>

This email has been scanned for viruses by Telecom SchoolZone,
but is not guaranteed to be virus-free.
--------------------------------------------------------------

<br

--

--

--------------------------------------------------------------
         This email was sent using Telecom SchoolZone.
                    www.schoolzone.net.nz

This email has been scanned for viruses by Telecom SchoolZone,
but is not guaranteed to be virus-free.
--------------------------------------------------------------

I know everyone is committed to getting Symantec working, but there
was mention of looking at alternatives. There are two I would
recommend, especially for a Windows based enviroment. Microsoft
Forefront http://www.microsoft.com/forefront/en/us/default.aspx a
licensed product and Microsoft Security Essentials a no cost offering
from us that can be used at home or in a small business enviroment
http://www.microsoft.com/security_essentials/ My pick is, but not
confirmed, (only my personal view) is that we may eventually develop
something in between that could potentially be a good fit for
education. I will keep you posted if any developments or news comes
our way on that.  I hope this information is useful for those that are
seriously exploring alternatives. Thanks.

Nils

On Nov 3, 1:19 pm, Craig <cra...@maranatha.school.nz> wrote:

Hi - a simple solution would be to run GNU/Linux on all your machines.
That way no anti virus is needed, nor adaware - takes time with the initial
set-up but saves lots of bother/time/money in the long run.
http://wikieducator.org/New_Zealand_Schools_OER_Portal/Digital_Horizo...

Cheers
Nathan

2009/11/3 nathan parker <npar...@warrington.school.nz>

--
Nathan P
CMB 14085
Warrington
Otago
NZ
034822605
0272148294

Uhm, why is no anti-virus needed?
Are we lumping Linux under the Apples-don't-get-viruses umbrella?

I don't think it takes any longer to set up. Arguably I spent less
time setting up the Ubuntu desktops than I did the XP ones.

J,

Hi - security built in to the Ubuntu set-up.
We have not needed anti virus for 3 years - not up with the technical issues
- just know that it is not required for Ubuntu or for any other GNU/Linux
set-up (I think)
N

2009/11/3 Julian Davison <jul...@tech.cbhs.school.nz>

--
Nathan P
CMB 14085
Warrington
Otago
NZ
034822605
0272148294

You are able to specify a GUP or Group Update Server in the settings
of the individual installs whereby one computer is designated to get
updates from the internet and distribute them to the other clients.
This can be scripted as a part of the installation process for your
windows machines - being a smartnet school I wouldn't imagine you
would have many. This should ease the worries of chewing through your
internet usage.

As far as smartnet servers go, do they have active AV running on them
all the time? It's been a while... If they don't then it's not very
much different to installing etrust on each machine at set up time.
AFAIK there is a SEP client for linux coming soon.

If you have a windows setup that includes windows servers, it is
naturally even easier to deploy SEP.

I am unfamiliar with any problems with TELA machines purely because in
my experience it makes far more sense to rebuild them when they arrive
than to use the image that they come with - this image is poorly made,
full of unnecessary and bloated software, and very slow. Solutions to
this problem would vary depending on your server setups, but
personally, I'd start with fresh builds to replace the TELA ones.

In any event, in my experience e-trust is utterly hopeless and has
never caught a single virus or piece of malware. SEP is a huge upgrade
from ETrust, and in my experience, vastly better than the majority of
alternatives. Remember of course that changing your AV is a massive
task for any network; I would suggest consulting with professionals if
you are at all confused or have problems.

Regards,

Sam Durbin

I concur with what is said above, especially the last sentence. If the
rest of your network config is not up to scratch, then this install is
also going to have issues.

Also the printed guide is only for a basic install and if you want to
do anything more or need more info, read the docs on the CD!

The only issue I have with SEP that I am researching is that the CA
uninstall runs, but the SEP client won't install as it is waiting for
a reboot. This will not be an issue on new builds for us as the AV is
installed automatically after the imaging is complete (AV NOT in
image). It will be annoying however for those laptops and servers that
will not be rebuilt during the new year. My best thought so far is to
write a GPO Computer Start Script...any better ideas?

Tim

I have to agree with you Sam - SEP is a huge step up from etrust. Kinda
like comparing a Mercedes to a Skoda(apologies to any die hard Skoda
enthusiasts out there). Indeed Symantec has already found viruses here
that etrust did not.

It installed on our College Win2003/XP network without any major drama
through the central console in a day or so to around 150 pcs. Just a few
snags like client firewalls and the outdated CD that was initially sent
out.

All in all it appears a good product. Dont be shy to sing out if you get
stuck.

Matthew Nicholls
Bishop Viard College
Porirua
nichol...@viard.school.nz

the individual installs whereby one computer is designated to get
updates from the internet and distribute them to the other clients. This
can be scripted as a part of the installation process for your windows
machines - being a smartnet school I wouldn't imagine you would have
many. This should ease the worries of chewing through your internet
usage.
all the time? It's been a while... If they don't then it's not very much
different to installing etrust on each machine at set up time. AFAIK
there is a SEP client for linux coming soon.
naturally even easier to deploy SEP.
my experience it makes far more sense to rebuild them when they arrive
than to use the image that they come with - this image is poorly made,
full of unnecessary and bloated software, and very slow. Solutions to
this problem would vary depending on your server setups, but
caught a single virus or piece of malware. SEP is a huge upgrade from
ETrust, and in my experience, vastly better than the majority of
alternatives. Remember of course that changing your AV is a massive task
for any network; I would suggest consulting with professionals if you
are at all confused or have problems.

--
--------------------------------------------------------------
         This email was sent using Telecom SchoolZone.
                    www.schoolzone.net.nz

This email has been scanned for viruses by Telecom SchoolZone,
but is not guaranteed to be virus-free.
--------------------------------------------------------------

Hmmm.. I've been dealing with a number of schools this year re anti-virus
software, sites that have had confickr infections a low end PC's and have
ended putting Nod32 on all machines after reading some of SEP's reviews, so
am interested in the responses in this thread re how SEP deals with these
issues.
I will report however that one site with a massive confickr infection (yes
they had Etrust and all Microsoft updates installed) we cleaned up in 3 days
by using the info from
http://hotpoo.wordpress.com/2009/02/18/conficker-fix-script/
and then installing Nod32 ..info well worth knowing if you get hit by this
virus.
Kelvin

On Fri, Nov 6, 2009 at 10:17 AM, Matthew Nicholls <nichol...@viard.school.nz

I'd be interested in hearing what other schools (windows enviroments)
think about the proformance of SEP.

We recently had a issue with confickr, and ended up installing SEP as
part of the "fix".
The PC's we have here are varying specs, but like most school's I
guessing, there is a large portion that are 3-5 years old.

They ran fine using eTrust, but SEP has definately cause the majority
of PC's to run a lot slower!

I realise that antivirus in a windows enviroment is a must, and it's
hard to move away from the MoE funded product, but in our case the
proformance drop of the PC's is a bit of a problem for us.

Anyone had similar issues??

Nāku noa,
Andrew Wood MCSE   CCNA   CCSA
IT Manager
Invergarry Road, TAUPO 3330
PO Box 945, TAUPO 3351
Tel: 07 378 9304 ext 855 Fax: 07 378 2363
Mob: 021 492 941
www.tauhara.school.nz

I'm testing Microsoft Security Essentials at the moment. Does anyone
have any experience with this? (It did find a recent virus that CA was
unable to detect on our site.

I have had a number of stranges issues with SEP, but after talking with
Sydney and getting some support from them we have at last got things
working OK.
Ministry helpdesk was / is no help at all. Symantec have a number of staff
that don't speak english in a way that I can understand so it took time to
resolve that as well.

Contact me directly and I can point you to Jay who has been a great help.

cheers
--
Terry Cole
Western Heights High School
Rotorua, New Zealand.
Phone: 07 349 5940 ext 791
DDI: 07 349 5950
Mobile: 022 0TERRYC (022 083 7792)
mailto:tc...@whhs.school.nz
http://www.whhs.school.nz

--
--------------------------------------------------------------
         This email was sent using Telecom SchoolZone.
                    www.schoolzone.net.nz

This email has been scanned for viruses by Telecom SchoolZone,
but is not guaranteed to be virus-free.
--------------------------------------------------------------