Eset Offers Well-Balanced Virus Protection Software

One of the things CRN Test Center engineers liked about the software is its compatibility with Windows 2003 Server. Most antivirus software packages are not yet compatible with that operating system.

Proactive vigilance is the obvious answer to the never-ending virus problem, but achieving a balance under which computers are protected from hackers and malicious code threats in e-mail, instant-messaging exchanges or Internet content while authorized people still have access to these services is becoming more of a daunting task.

The challenge lies in determining what level of virus protection a customer needs. That involves more than simply selecting a virus-detection software package. Solution providers can use the combination of several antivirus products, from automated software updates to network monitoring, to create the most effective range of services.

Integrators should concentrate on features such as support, logging and notification. Auto-notification allows integrators to proactively protect networks, driving service revenue. Viruses abound in the real world, and solution providers need to be reassured that their selected vendor keeps up to date with virus information.

With new viruses being unleashed on a regular basis, antivirus software has become an easy sell as more companies experience the effects of infected files entering their networks. Providing antivirus protection for a customer's network goes beyond simply installing and administering an antivirus solution. Staying on top of new developments is key to maintaining a high level of network security, according to CRN Test Center engineers.

Eset's NOD32 version 2.0 includes a scheduler, virus updates, an e-mail filter and a GUI that makes it easier for users to manage and detect incoming threats to computer networks. The company's solution concentrates on features such as support, logging and notification. An auto-notification feature allows integrators to proactively protect networks, driving service revenue.

The NOD32 software contains several tools that scan attachments and detect new viruses in realtime in e-mail or Internet traffic. The software's E-Mail Monitor (EMON) MAPI formats scan messages and attachments in POP3 accounts, its Active Monitor (AMON) scans all computer activity, and its Internet Monitor (IMON) scans all Internet traffic including e-mails (POP3 formats). This layered approach allows NOD32 to be optimized in the appropriate use of heuristics at different times and in response to different potential threats.

The result is that the program doesn't waste time blindly checking files that cannot possibly be malicious and takes a little extra time checking more complicated files that may have something to hide. The tool is a well-balanced program offering high-speed, low-resource impact and excellent detection.

Test Center engineers installed Eset's NOD32 version 2.0 on a dual-Pentium Xeon server running Windows 2003 Server. Two client PCs were attached to the network running Windows XP and Windows 2000 Professional.

The NOD32 software can be downloaded from the vendor's Web site, and setup is a no-brainer, with wizards available to walk the administrator through installation. The latest version of the virus definition database must be downloaded immediately after the installation has been completed to ensure the highest detection capabilities of the system, and the .exe file needs to be manually launched to enable updates to download from Eset's Web site.

To test the efficacy of NOD32's virus-detection ability, CRN engineers downloaded the Eicar test, a real virus available for test purposes, from www.eicar.com. The test file does not include any fragments of viral code. Most antivirus products react to the test file as if it were a virus. The file is a legitimate DOS program, and produces sensible results when run. It is also short and simple. In fact, it consists entirely of printable ASCII characters, so that it can easily be created with a regular text editor. Any antivirus product that supports the test file should detect it. NOD32 detected the eicar.com virus file as soon as it was downloaded, encrypted it and put it into quarantine to prevent it from being accidentally executed.

In addition to the Eicar test, Test Center engineers recommend the Virus Bulletin (www.virusbtn.com) as another excellent way to test antivirus packages. The Virus Bulletin adds new viruses monthly to its testing database.

Eset's NOD32 version 2.0 provides a good balance of comprehensive protection and management all in one box. The only deployment challenge is measuring how well the product fits into an existing infrastructure and if comprehensive reporting outweighs realtime monitoring.

CHANNEL PROGRAM SNAPSHOTS
>EST SOFTWARE NOD32
PRICE: $39
MARGIN: 30 percent
DISTRIBUTORS: Direct from vendor
TECH RATING:

CHANNEL RATING:

CHANNEL OVERVIEW: Coronado, Calif.-based Eset Software lacks an official channel program and provides barebones support to partners. The vendor helps solution providers target SOHO accounts by splitting advertising costs and helping partners with custom pricing.

Note: Vendors can earn up to five stars for technical merit and five for their channel program. If the average of these two scores is four stars or greater, the product earns CRN Test Center Recommended status.