Re: Sophos AV - why am I paying for this? [message #122369 is a reply to message #122225] |
Thu, 25 June 2015 17:46   |
MarkK
Messages: 342 Registered: April 2007
|
|
|
|
Maerad wrote on Mon, 22 June 2015 08:52We never had any problems with viruses. First a bit more aggressive spam rules (most viruses are sent like spam mails), then the sophos protection, then the client protection and MOST important - A KNOWING USER!
Maerad,
I've said the same thing before about anti-malware strategy INCLUDES an anti-spam strategy; and been argued with about that statement. Yes there is a big difference in malware and spam, but if one of your strategies has stopped one (spam or malware), then it has most likely prevent the other as well (malware / spam).
But like Fort Knox, doesn't matter how much security you have in place, if a user opens a door for someone, a hole in the security has been opened up. Regardless of how much you hammer in to your users about what to look for, it is those targeted spear phishing emails that users are most likely to fall prey to. The crook knows his audience and how to possible get that door opened just enough to slip something in.
There was a time that you had your firewall on your network's edge and that was good enough. Those days are gone. Now you need a firewall and Intrusion Prevention system at the network edge (even more options is better); firewall, antivirus, and intrusion prevention on your mail server; and firewall, intrusion detection, antimalware/antivirus on your workstation. This is why we are paying for Sophos AV.
|
|
|