Derek Dongray (2/11/2009)
David B (2/10/2009)
in a standard corporate network all AV's will probably be the same brand and version and so if the workstation AV cant stop it, neither will the server's version.
A company I worked at, for historical reasons, had different AV software in the US and in Europe. After discussion, it was decided to keep it that way, partly so that we had the additional cover if one manufacturer could detect something the other didn't.
We also installed the Exchange specific AV add-ons for those servers to check mail messages.
We did that when I was in the USAF. My organization, though it was attached to a particular HQ unit, actually reported to the HQ unit above that. So we have some leeway in what we did as far as managing our own systems. We ran a different AV suite. Sure enough, our AV suite flagged a Word macro virus the rest of the base was infected with that its AV suite wasn't detecting. So we stayed clean and was able to alert said unit so they could take corrective actions.
K. Brian Kelley, CISA, MCSE, Security+, MVP - SQL Server
Regular Columnist (Security), SQLServerCentral.com
Author of Introduction to SQL Server: Basic Skills for Any SQL Server User
| Professional Development blog
| Technical Blog