RE: How Secure is Windows, Really?

Joe,

We tried the technique of scanning our IFS from a PC years ago.  It would 
take days.  (Maybe it is one of the NetServer poor performers issues.)
Now, if it takes days to scan your IFS using this method, and you start 
the scan on a Monday, get a virus into a completed directory an hour after 
it starts, and it doesn't get trapped for a week you can be toast.

There are at least two levels to virus scanning software:
1 - To scan all existing files for virus.  This does a couple of things.
: Catches up on items that were installed prior to the AV package.
: Catches items that might have snuck through on an older pattern file.
: Catches items that got through when the AV package was disabled (Hey, 
let's install this package while our system is in restricted state.)
2 - To catch items "as they occur".  Running your AV package on a PC and 
having it scan your system is NOT going to do this.  IBM has created an 
exit point that basically says perform an action on any IFS entry as soon 
as it is created or changed.  Primarily for use by i5/os AV package 
developers.  Also used by FTP exit point developers who want to post a 
file into production upon arrival.

Rob Berendt