Andy:
I do not ship my product with anti-virus s/w.
I use the RAM-based EWF which offers some level of protection in that if my
box was to be infected, in most cases a reboot would restore the machine.
The case that the EWF does not handle is if the virus uses your box as a
gateway.
Also, my product is headless. It's a remote field service problem to keep
the virus dat files updated especially when the box is powered off when not
in use, i.e. it's hard to schedule the auto update when the box is off.
Another thing, I wouldn't want the automatic virus checking running all the
time for performance reasons. Some debate what use anti-virus s/w is if
it's not running all the time.
One other thing... my box is tightly locked down. Before any release, I run
the Retina security tool which tries to hack in via open ports, shares, null
session, remote registry access, etc. I recommend implementing tcp/ip port
filtering, and if you use IIS then run the LockDown Tool and URLscan. Plus,
it's a good idea to change the http port to something other than 80.
Security is a huge issue worth investing time into. A few tweaks can get
your box a long way to being secure.
HTH... Doug
"Andy Pont AMIAP" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Has anyone included anti-virus software as part of their XPE image?
> If so whose, how easy was it to componentize, how much excess fat did
> it bring into the image?
>
> What is the communities considered opinion on this - is it worth
> doing?
>
> Any information would be much appreciated.
>
> Thanks and regards,
>
> Andy.
|