Best internet security/firewall combination?

[Goliath]

Right so after getting screwed by the Cryptolocker virus we are looking to beef our security on our server/pc's, we currently only have antivirus on all the PC's (Norton Internet Security 2015) and server, that's it. (had synology backup system that backup up to the server but no off site backups, all corrupted )

Out of the members' experience, what would you guys recommend adding to Norton Internet Security 2015? Our company is small with a 2TB server with total 11 people to give some background and our needs is really basic.

 

[DrJohnZoidberg]

I wouldn't touch Norton with a barge pole.

In my opinion the best start would be to minimise the risk of anything nefarious getting in. Set up a decent firewall solution, lock down network resources that aren't absolutely necessary. Make sure all email is getting properly scanned and you have effective spam filtering in place.

Not that I'm saying you shouldn't use any AV software. I just find using suites like Norton akin to having a firetruck parked in your driveway in case your braai gets out of hand, it's big, noisy and gets in the way when you really could use something smaller that's just as effective.

 

[HavocXphere]

For servers I'd stay away from FW/AV combos...don't think thats a good plan for anything other than home.

I know most guys here swear by Nod32 on virus side. Kaspersky also seems popular.

On the commercial FW side I'd go for a proper FW setup...Libs should be able to help you out there...he is a smoothwall rep I think.

Also...consider a decent dose of user education...thats usually the biggest gap in the defenses...they do really stupid sht. (e.g. I know of a case where someone took his work laptop - the one chock full of tracking, monitoring and encryption tech to keep sensitive data secure...and used it to surf super dodgy sites). Don't think his career survived that...

 

[w1z4rd]

Linux with nod32 on it.

 

[Goliath]

I wouldn't touch Norton with a barge pole.

In my opinion the best start would be to minimise the risk of anything nefarious getting in. Set up a decent firewall solution, lock down network resources that aren't absolutely necessary. Make sure all email is getting properly scanned and you have effective spam filtering in place.

Not that I'm saying you shouldn't use any AV software. I just find using suites like Norton akin to having a firetruck parked in your driveway in case your braai gets out of hand, it's big, noisy and gets in the way when you really could use something smaller that's just as effective.

What AV would you recommend? Basically what I suggest is that all our PC's be brought up to date to Windows 7 (still have one on XP..!), installing a Antivirus that is better than Norton on all the PC's and on the server, installing a backup system off-site of the server and that's about it summarized in short. And off course educating our employees a little bit better relating to IT security and prevention etc (we are a property company and thus not too tech savvy)

 

[Bryn]

Kaspersky is the best. I don't think any other antivirus scores full marks in every category in that independent testing website.

 

[initroot]

Right so after getting screwed by the Cryptolocker virus we are looking to beef our security on our server/pc's, we currently only have antivirus on all the PC's (Norton Internet Security 2015) and server, that's it. (had synology backup system that backup up to the server but no off site backups, all corrupted )

Out of the members' experience, what would you guys recommend adding to Norton Internet Security 2015? Our company is small with a 2TB server with total 11 people to give some background and our needs is really basic.

Take a look at ISheriff.
We currently using combination of Isheriff and Cyberroam and its working great.

 

[reactor_sa]

Kaspersky or eset, the two most highly rated by USERS and independent sites.

The concensus seems to be flip a coin, but flip it towards Kaspersky if protection is higher priority than performance. And flip it towards eset if you don't want anything slowing down your system in the background.

 

[Goliath]

Kaspersky or eset, the two most highly rated by USERS and independent sites.

The concensus seems to be flip a coin, but flip it towards Kaspersky if protection is higher priority than performance. And flip it towards eset if you don't want anything slowing down your system in the background.

Thanks, there's so many damn websites promoting this one or that but through them all Kapersky, Bitdefender, Eset, Mcafee (just looking at the bigger well know players) pops up the most for active protection and Malwarebytes for on demand protection..?

 

[gregmcc]

You wont go wrong with Kaspersky/Eset. I wouldn't bother with firewalls on the servers/desktops (Unless they are laptops)


I would also look at the internet side - I presume your company has internet for the users. Is this via a proxy (I hope so!) and do you have content filtering. Without this your users will be able to browse to any dodgy sites and infect their machines.

The desktop/server AV should be the last line of defence.

Are users allowed to plug in usb sticks? Secure these, secure the surfing and patch/AV desktops and you should be fine.