So far, we haven't been using Perfigo to check for DAT versions -
trusting that ePolicy Orchestrator (which we do require via Perfigo) was
taking care of that.  I've found a few instances of that not being the
case, though, and have been considering requiring minimum DATs via
Perfigo.  Unfortunately, Perfigo doesn't give "greater than or equal to"
as an option for strings.  NAI's switch to daily DATs just cranks the
issue up a notch.

My current thinking is to create my own checks rather than using
Perfigo's, and do a bunch of them at a time, then update the rules
weekly or so.  So if I were starting today, I'd create checks for 4437,
4438, 4439... 4447, perhaps.  Then put a reminder in big red letters in
my calendar to update those every Monday!  I'm not happy about the
potential complications if I'm unexpectedly out and nobody remembers to
take over the job, though.

It's not as good as really checking for the latest DAT, but it's less
likely to fail people improperly.  If ePO is messed up this will catch
it, and if ePO isn't messed up then it will keep them fully updated.

If anybody else has a clever idea, I'd love to hear it...

-Anne

--
Anne H. Bower
Computing Support Analyst, Student Services
Information Technology Services, Davidson College
[log in to unmask]


-----Original Message-----
From: Perfigo SecureSmart and CleanMachines Discussion List
[mailto:[log in to unmask]] On Behalf Of Michael Beck
Sent: Wednesday, March 02, 2005 10:08 AM
To: [log in to unmask]
Subject: Re: Smart Enforcer would not recognize the DAT update

We're firing up our second residence hall this week to use SmartEnforcer
checks.  We find this same issue happening with trying to enforce
up-to-date virus dats.  Network Associates released 2 dats yesterday and
they both caused several support calls before Perfigo/Cisco updated the
rules.  How do others deal with this issue?  Simply turn on/off the
virus dat check?  Create some rules predicting the values of future dat
versions?  Any other way?

Michael Beck
IT Services, Miami University

Deborah Hovey wrote:
> I have to go in and turn off the current update check about twice a
> week- updates come out and there is a lag time before Perfigo updates 
> their rules- check and see what update Perfigo is looking for- that 
> may be your problem.
> 
> Debbie
> UMW
> 
> 
>>>>[log in to unmask] 3/2/2005 8:50:22 AM >>>
> 
> One of my  ResNet technicians tried to help a student get her computer

> online, but SmartEnforcer would not recognize that the DAT was already

> updated.  Here are the things the technician tried to solve the
> problem:
> 
> system was cleaned with Ad-Aware and Spybot S&D re-installed  both 
> McAfee virusScan and SmartEnforcer uninstalled uncessary programs 
> there is no other antivirus on the computer
> 
> Any other suggestions of things to try?  The computer is Windows XP.