|
jgra
Member
Status:
offline
| |
 Posted - 23 Oct 2009 : 16:38:33
|
Dears,
we´ve been working with F-Secure for a few years and we´ve identified a few things that are of upmost importance to our clients and are decisive in choosing a security solution:
1) WEB administration using IE or Mozzila, instead of the PMC
2) PMS performace should be improved. When we have over than 500 clients, performance is really poor. With 2000 clients it´s almost impossible to use PMC, view alerts etc.
3) USB ports blocking and device identification (allowed pen drives, for instance)
4) Remote installation failure messages don´t give a clue about what´s really happening. It compromises POC´s.
5) Wake-on-Lan integration to allow off-hour virus scanning
6) More control over CPU and memory utilization, allowing reduction of consumption during peak hours
Version 9.0 is much much better then 8.0 but we still have a long road to go.
Hope to hear from you.
Joao Gualberto Rizzo Araujo
XSITE Consultoria e Tecnologia
|
Country:  Brazil ~
Posts: 3 ~
Member Since: 23 Oct 2009 ~
Last Visit: 25 Oct 2009
|
Alert Moderator
|
|
|
jgra
Member
Status:
offline
| |
Posted - 24 Oct 2009 : 14:26:50
|
More to the wish List:
1) Multiple accounts with different acces rights in PMC to allow different people to manage different branches of the domain tree
2) Load balance in PMS to allow running it in different machines but acting as a unique server
3) Allow export/import policies between different PMS
4) Allow more control over files written to system folders in Windows, just like it´s done in the Linux version (signing system files and locking write operations to system folders).
5) Remove infected files from compressed archives
Joao Gualberto Rizzo Araujo
XSITE Consultoria e Tecnologia
|
|
Country: Brazil ~
Posts: 3 ~
Member Since: 23 Oct 2009 ~
Last Visit: 25 Oct 2009
|
Alert Moderator
|
|
|
|
Posted - 26 Oct 2009 : 17:28:51
|
Hello,
my wish list of features is as follows;
1) Enhanced Web Reporting (i.e. the functionality equivalent to McAfee and Symantec as per their current AV products)
2) Ability to schedule and email reports automatically
3) Centralised SNMP reporting from the PM server on behalf of all clients (as opposed to install snmp on a per machine basis)
4) Syslog support for Windows (same functionality as above but with Syslog)
Many Thanks
|
Country:  United Kingdom ~
Posts: 14 ~
Member Since: 18 Jun 2008 ~
Last Visit: 17 Nov 2009
|
Alert Moderator
|
|
|
|
Posted - 02 Nov 2009 : 16:00:09
|
I agree to all points above, especially multi-user functionality for PMS (move it to web based system, you can use exact copy of PSB).
- Proxying product updates just like the pattern updates can be proxied. If you have a large WAN structure and offices with 20-30 PCs releasing a version update for them (30*60MB=1,8GB) will kill the connection for a day.
- Improve security of policy signing. There is one private key that never changes, and admin password is just used to encrypt the key. If you have access to the key *once* you will alway have it no matter if the password is changed.
|
Country:  Germany ~
Posts: 3 ~
Member Since: 02 Nov 2009 ~
Last Visit: 18 Nov 2009
|
Alert Moderator
|
|
|
Eeli
Member
Status:
offline
| |
Posted - 10 Nov 2009 : 15:53:35
|
Hi,
I think the biggest problem are slow wan links and distribution and installation to remote sites with slow connections.
When new version comes there should be either automatic version update or atleast proxying of the full installation packages to remote sites.
Proxying is problematic when there is no local server on remote site.
It's lot of manual work to create MSI packages and distribute them to remote sites and get users to install them on there own. In some environments its problematic, since users won't have permissions.
In conclusion Automatic Version update of the product would be best solution, with policy manager management of versions. Thats what F-secure home version does and what competitiors do.
Hopefully there will be improvement soon.
|
Country:  Finland ~
Posts: 1 ~
Member Since: 10 Aug 2006 ~
Last Visit: 10 Nov 2009
|
Alert Moderator
|
|
|
|
Posted - 10 Nov 2009 : 18:03:51
|
I wish the option to create a package with also the hotfix, instead to distribute them later...
:)
|
Country:  Italy ~
Posts: 9 ~
Member Since: 28 Nov 2007 ~
Last Visit: 20 Nov 2009
|
Alert Moderator
|
|
|
|
Posted - 11 Nov 2009 : 16:58:28
|
Some of my wish list are being described by the fellows here.
1. Allow export/import policies between different PMS Servers but with the same installation keys since with different keys is impossible I think.
2. Alerts according to their severity to be routed in different windows. I do not want Security with informational alerts in the same window but in the same time I wish to have the opportunity to have displayed all alerts. Moreover there is something to be done with alerts. If for example are 10000 alerts is taking time for the alerts to be displayed. There maybe should be done something with management agent to suppress multiple alerts with the same content. For example a spyware active bar on a XP Client would send to the management console 10000 alerts in seven hours period from one host. In windows event viewer multiple same events are being suppressed and there is a notification.
|
Country:  Greece ~
Posts: 37 ~
Member Since: 24 Nov 2005 ~
Last Visit: 19 Nov 2009
|
Alert Moderator
|
|
|
cms
Member
Status:
offline
| |
Posted - 13 Nov 2009 : 18:35:16
|
1. Host based IPS/IDS for server products.
2. bandwidth management
3. patch management: use the network neighborhood or proxy policy manager to distribute hotfixes (it's not quite nice having to push a new hotfix over and over again)
4. refresh latest build with all patches/hotfixes and keep a repository for old versions also
5. reduce the number of records in the alerts/reports by adding a counter (why log over and over again the same line when you could group them)
6. set compliance profiles (some generic + custom) and generate reports
7. switch to a web management policy manager (it's not ok to give RDP to users to manage the console).
8. enable the distribution of hotfixes via policy manager, once it's approved (along with a bandwidth usage profile), push them via automatic updates. it will make life easier for everyone.
9. redirect policy manager logs to a syslog server (at the same time log them into your own engine, however it's good for a SIEM)
10. create exclusion lists for know possible issues: i.e.: Eposon scanners will generate output very slow if you don't exclude certain files (I'm sure it's not the only know issue)
Best regards,
Cristian
|
Country:  Romania ~
Posts: 2 ~
Member Since: 15 Oct 2009 ~
Last Visit: 17 Nov 2009
|
Alert Moderator
|
|
Home
Forums
Register
