In Brief
Burton Group's Enterprise Antivirus Selection Criteria
Enterprise AV selection considerations, according to Burton Group analyst Dan Blum.
By Mary Brandel
August 05, 2009 — CSO — Enterprise AV selection considerations, according to Burton Group analyst Dan Blum:
- Price. Inquire about annual subscription costs and additional charges for antispyware, cleaning, host intrusion protection system capabilities, etc. Ask whether suite pricing is flexible if you don't require every module.
- Scanning engine. Are there multiple agents for antivirus, antispyware, application control, etc.? If so, do they cause management or performance inefficiencies?
- Behavior-blocking functionality. Does the system monitor system calls to prevent vulnerability exploitation attempts?
- System firewall. Does it provide blacklists and whitelists for addresses and domains?
- Application control (whitelisting). Does it provide up-to-date and customizable whitelists and blacklists? A learning engine?
- Cleaning/remediation. Does it provide virus, spyware and difficult rootkit cleaning?
- Client updates. How large and frequent are signature and other updates? This can range from one per day to multiple updates per day.
Other stories by Mary Brandel
antivirus selection criteria
Security Directions: A Virtual Conference
Available On Demand Sept. 30 - Dec. 30
Join us for a virtual event with candid, expert information on top security challenges and issues - all from the comfort of your desktop.
Protecting PII: How to Work with IT to Manage Risk
Understand the critical nature of the test data privacy problem and get tips on how to work with IT to implement a test data privacy program.



