Re: Symantec corporate AV & Firewall co-existence problems?

No experience with it; we don't do anything Symantec here except the
smattering of pcAnywhere when Windows Remote Desktop won't suffice.
That Symantec wouldn't be compatible across their own product lines
shows how bad their product lines have gotten (lots of complaints on
various forums like the Gripe Line ( http://www.gripe2ed.com/scoop/ ).

Can you put on your own software?  If so, get Kerio firewall
http://www.sunbelt-software.com/Kerio.cfm - there are free & paid
versions; the differences are on the link.  The free version is probably
sufficient.  Or get Zone Alarm, although gripes about them & their
support have been on the rise lately.

Also, do what you can to tighten down Windows in general - turn off
services you don't use like file sharing, etc.  Make sure your wireless
doesn't work on ad-hoc (peer to peer) networking; access point should be
the only way you ever use it.  Apply all security patches except the WGA
update (which was pushed as 'critical' but is really a strong-arm tactic
by MS to invalidate questionable XP installs).

I've bypassed the need for public WiFi as long as my cel phone works.
My new Treo 700p (
http://www.palm.com/us/products/smartphones/treo700p/?creativeID=LFB|tre
o700p_palm_os ) has EvDO; I get 600-900 Kb/s speed and 'tether' it to my
laptop.  The laptop uses it as a modem.  Use Sprint's PowerVision + a
hack to do the Phone-as-Modem cheap or use Sprint's direct
Phone-as-Modem plan (which includes PowerVision).  The PAM plan costs
more but won't violate your terms of service.  Of course, the Treo
itself can replace the laptop for some access; I can TN5250, VPN, get
email from Outlook/Exchange (or GMail or about anything else), etc.

John A. Jones, CISSP
Americas Information Security Officer
Jones Lang LaSalle, Inc.
V: +1-630-455-2787 F: +1-312-601-1782
john.jones@xxxxxxxxxx

-----Original Message-----
From: pctech-bounces@xxxxxxxxxxxx [mailto:pctech-bounces@xxxxxxxxxxxx]
On Behalf Of Dan
Sent: Wednesday, July 12, 2006 1:16 PM
To: PC Technical Discussion for iSeries Users
Subject: [PCTECH] Symantec corporate AV & Firewall co-existence
problems?

Our organization uses Symantec's corporate AV on all of our clients.
Because I sometimes connect to unsecured wireless on the company-issued
laptop, I requested that a client firewall be installed.  So they
installed Symantec's firewall, but "broke" the AV in the process.
According to our network services group, this is a "known" issue with
Symantect, but in my own investigation, I haven't found any information
about any problem - it probably doesn't help that Symantec has two
million (seemingly) "enterprise"
products.

Currently, I have Symantec AntiVirus (Corporate Edition) version
8.1.0.825installed, and it appears that they removed the firewall
because I don't see any icons, it's not in my Start Menu, and it's not
in the notifications taskbar.  I'm guessing that the firewall was their
Symantec Client Security product.

Anybody heard of, or had problems with, this combination?  If so, any
solutions or advice?

TIA,
Dan
--
This is the PC Technical Discussion for iSeries Users (PcTech) mailing
list To post a message email: PcTech@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/pctech
or email: PcTech-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at
http://archive.midrange.com/pctech.


This email is for the use of the intended recipient(s) only.  If you have 
received this email in error, please notify the sender immediately and then 
delete it.  If you are not the intended recipient, you must not keep, use, 
disclose, copy or distribute this email without the author's prior permission.  
We have taken precautions to minimize the risk of transmitting software 
viruses, but we advise you to carry out your own virus checks on any attachment 
to this message.  We cannot accept liability for any loss or damage caused by 
software viruses.  The information contained in this communication may be 
confidential and may be subject to the attorney-client privilege. If you are 
the intended recipient and you do not wish to receive similar electronic 
messages from us in future then please respond to the sender to this effect.