Услуга · Information security

Antivirus protection

Corporate protection differs from home protection not in detection quality but in being manageable. Thirty programs with individual settings do not protect a company: one forgotten machine without updates devalues the other twenty-nine.

Console
all devices at once
Databases
they update themselves
Alerts
we review them
Status
visible in the report

What the work includes

The most important thing here is not installation but oversight: someone has to see that protection is in place everywhere and genuinely working.

Discuss the scope

Unified management

A single point from which the state of every device in the company is visible.

Workstations

Scanning of files, mail and web traffic, and monitoring of suspicious program behaviour.

Servers

Their own policies: a file server and a database server need entirely different exclusions.

Mail

Filtering attachments and links at the gateway before the message reaches the user.

Updates

The signature databases update themselves, and machines that drop off the network go onto a separate list.

Response

Alert review, disconnecting an infected machine from the network, reporting.

How it goes

A hundred workstations can be deployed in a few days; most of the time goes on policies and exclusions.

01

Choice

We choose the product against the requirements, including presence in the relevant register where that matters.

02

Installation

We deploy it centrally, without walking round the offices.

03

Policies

We configure the rules and exclusions. Mistakes in exclusions on database servers are a classic cause of complaints about slowness.

04

Running

We watch the state of things, review the alerts and send reports.

Antivirus alone does not save you from ransomware. It catches what is known, while a targeted attack is prepared for a specific victim and tested against popular products in advance. Only the combination works: antivirus, trimmed rights, an allow-list of programs, and copies that cannot be reached.

Questions and answers

The one that meets your requirements and that your administrator will be able to run. The difference in detection between leading products is small; the difference in ease of management and support is substantial.

Disconnect the machine from the network rather than switching it off: powering down loses the traces in memory. Then investigate to the procedure. The order of actions must be written before the first case, not invented in a moment of panic.

On those used to read work mail and log into systems, at least some control is needed: a mandatory passcode, encryption and the ability to wipe the data remotely if lost. An ordinary antivirus matters less there than those three things.

We will put antivirus protection in order

State the number of devices and your current product. We will assemble a managed solution and write rules for your servers.