RE: McAfee Security Shield
- From: pnoble@xxxxxxxxxxxxxxxxxxxxxxxxxx
- To: isalist@xxxxxxxxxxxxx
- Date: Tue, 14 Dec 2004 09:30:26 -0000
Hi there people, only just joined the list (huzzah) but we've just been
evaling a variety of AV product for gateways etc and the security shield was
one of the ones we tried, our experience of it was rather sordid.
We've got isa2004 running on a single cpu 2.4 with 1gb ram, this has coped
perfectly ok with anything our 100 users have thrown thru it, but after
about a week of having macafee on it the security sheild processes started
cpu hogging - to the point where the server gui was lagging horrendously, it
was taking about 5 minutes just to get to the services window to shut the
services down. Needless to say while this was lagging all network activity
ceased.
After doing the standard diagnostics and nothing looked amiss in the event
logs etc I uninstalled the product, much to my dismay the gui was still
broken and the server still lagging really badly. As time was an issue I had
to bring another isa server forward to primary firewall status and take the
broken one out of the loop entirely, even with no macafee services or nics
plugged in the server was still running hellishly poor, eventually I tracked
it down to one of the isa services that was cpu hogging (at standstill).
As a point of interest I totally flattened the server, rebuilt it, put
isa2004 back on it, created a simple all access out rule and put security
shield back on it and left it protecting our test network, the same thing
happened again, something seemed to damage the isa services and caused them
to hog all resources, I reinstalled isa to no avail, I uninstalled security
shield, no avail, a reinstall of isa at that point solved the problem.
As we've been running an isa2004 server since beta and never experienced any
problems with it except when the security shield was involved I put it down
to that product, either it opened the isa server up for abuse or just plain
broke a bit of the isa config I dunno, either way it managed to decommission
a server and take a week to sort out, not an ideal solution to getting av on
the gateway :)
Paul.
-----Original Message-----
From: Ara [mailto:ara@xxxxxxxxxx]
Sent: Tuesday, December 14, 2004 2:37 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: McAfee Security Shield
http://www.ISAserver.org
Guys,
Please be serious about it. I really need advise. One other thing I liked
about it was the fact that it also supports SMTP scan so I can make a combo
of it much cheaper that GFI for web browsing and exchange. 50 licenses for
17$ each is way much cheaper than mail security and download security unless
I choose the free alternative (!) which is not fair and legal for business.
Anyway, thank you for suggestion
> -----Original Message-----
> From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
> Sent: December 13, 2004 9:28 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: McAfee Security Shield
>
> http://www.ISAserver.org
>
> It's Christmas; shut up and take your successes where you can.
> ..some people's kids; I tellya...
> =^p
>
> -------------------------------------------------------
> Jim Harrison
> MCP(NT4, W2K), A+, Network+, PCG
> http://isaserver.org/Jim_Harrison/
> http://isatools.org
> Read the help / books / articles!
> -------------------------------------------------------
>
>
> -----Original Message-----
> From: John Tolmachoff (Lists) [mailto:johnlist@xxxxxxxxxxxxxxxxxxx]
> Sent: Monday, December 13, 2004 18:25
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: McAfee Security Shield
>
> http://www.ISAserver.org
>
> What? Some one listen to me? Why?
>
> John Tolmachoff
> Engineer/Consultant/Owner
> eServices For You
>
>
> > -----Original Message-----
> > From: Ara [mailto:ara@xxxxxxxxxx]
> > Sent: Monday, December 13, 2004 5:54 PM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: McAfee Security Shield
> >
> > http://www.ISAserver.org
> >
> > Ok. I listen to you and pass by it.
> >
> > > -----Original Message-----
> > > From: John Tolmachoff (Lists) [mailto:johnlist@xxxxxxxxxxxxxxxxxxx]
> > > Sent: December 13, 2004 8:22 PM
> > > To: [ISAserver.org Discussion List]
> > > Subject: [isalist] RE: McAfee Security Shield
> > >
> > > http://www.ISAserver.org
> > >
> > > > Oops
> > > > What is the problem with that?
> > > > Product itself? Support? Or price?
> > >
> > > Yes, Yes and Yes. Oh, and their corporate mentality stinks as well.
> > >
> > > John Tolmachoff
> > > Engineer/Consultant/Owner
> > > eServices For You
> > >
> > >
> > >
> > > ------------------------------------------------------
> > > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > ------------------------------------------------------
> > > Other Internet Software Marketing Sites:
> > > World of Windows Networking: http://www.windowsnetworking.com
> > > Leading Network Software Directory: http://www.serverfiles.com
> > > No.1 Exchange Server Resource Site: http://www.msexchange.org
> > > Windows Security Resource Site: http://www.windowsecurity.com/
> > > Network Security Library: http://www.secinf.net/
> > > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > > ------------------------------------------------------
> > > You are currently subscribed to this ISAserver.org Discussion List as:
> > > ara@xxxxxxxxxx
> > > To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > World of Windows Networking: http://www.windowsnetworking.com
> > Leading Network Software Directory: http://www.serverfiles.com
> > No.1 Exchange Server Resource Site: http://www.msexchange.org
> > Windows Security Resource Site: http://www.windowsecurity.com/
> > Network Security Library: http://www.secinf.net/
> > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion List as:
> > johnlist@xxxxxxxxxxxxxxxxxxx
> > To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> jim@xxxxxxxxxxxx
> To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
> All mail to and from this domain is GFI-scanned.
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> ara@xxxxxxxxxx
> To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
pnoble@xxxxxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
