Net Admins, active spyware protection. What do you use?

[Phantronius]

Ok Admin guru's, im gonna pick your brain and expertise. I work for a local IT firm and alot of our clients are small based businesses and a lot of single customers who simply don't the brain power, time or ability to use indepth spyware removal tools and cleaners other then SpyBot and Adaware.

Those work great, WHEN UPDATED AND USED but my company is really looking for an "invisible" solution to where it will sit byitself, keep most of the basic spyware junk out of a machine, update it self with definitions and be intelligent enough to block bad things and allow good data to flow through without throwing up a damn window every single time asking the customer what to do!

We have been using SunBelts Counterspy as a single client and as a LAN based enterprise active protection on our network for the past few months but there is no way to tell it to shut the hell up. Every single freaking packet that passes through WAN connection it asks the client what to do with it. Hell, half the time I dunno what to do with it, so whats the average consumer going to do? I can't give a seminar to every fricking client on Do's and Don'ts, use Firefox, don't go to bad websites that look like 12 year olds built it, don't use P2P programs.

What have you guys been using/recommending to clients? I could really use some feedback as trying to "teach" people how to use the internet saftely isn't working, especially when it comes to clients kids.

 

[kami333]

Are you looking for a server based, centrally controlled or just something to install on client machines?

If it's just for clients, the MS Antispyware is very straight forward and pretty good.

 

[daweeze02]

Our poor call center doesnt even have a chance to get spyware, they are only allowed to go to 5 sites and one is internal. Examples directv(what we sell), USDTV, mapqest, earthlink.

 

[WileCoyote]

The only server/client anti-spyware package I've installed for my customers is CounterSpy Enterprise. It seems pretty effective for an office of 10-15 people. My only complaint is that it uses a lot of resources - the server, network, and workstations all suffer, even though the scans are spread throughout the work day.

 

[John]

Webroot Spy Sweeper Enterprise

http://www.webroot.com/enterprise/products/

 

[imported_JFG]

We also use counterspy. Works well. We have had maybe 1 or 2 problems with false positives over about a years time

 

[nweaver]

I use GPO, restricted accounts, and heavy filtering of where folks can go

ms antispyware beta has worked great, but using similar stuff at home I never needed it, never got spyware.

 

[scottws]

Well, you could use Windows Defender beta 2 or Ad-Aware Professional.

 

[Woodie]

Macafee..but that's in an Enterprise setting, where we are leveraging the EPO management tool.

 

[acole1]

SpyCatcher.... but it does pop up and prompt you sometimes, so that might not be something you would want.

I relate to your user base though. Every time there is a popup window or warning they have to call to make sure it's ok, or ask what its doing. I have found MS Antispyware very helpful in how it runs silently in the background, and the following Windows Defender works well too.

If you are looking for an Anti-virus solution, Sophos provides some of the best silent-protection I have seen. A normal user doesn?t even knows it is there.

 

[FreshPrince]

Symantec Antivitus Corporate Edition 10

it has an excellent anti-spyware engine and it's centrally managed.

on top of it, we also use Windows Defender and Spybot 1.4

at the inside perimeter we use Symantec Internet Security Proxy Gateway. It's a hardware appliance and it catches 95% of all the bad stuff before it even hits the workstations.

At the outside perimeter our firewall has application intelligence and has the capability to block spyware. We also have IPS that blocks as well.

layers is a good thing in security.