Labs

This latest version of CA's virus-protection package revolves around its InnoculateIT software and an administration console. This offers a range of new features, including improved discovery and a web-based interface. The suite comprises three main components - an administration server along with the local on-demand and real-time scanners.

Deployment tools are more limited, as installation to NT, 2000 and XP systems is automated, with a separate remote installer that uses an installation command file (ICF) to deploy the same group of Registry settings to multiple systems. However, as with Kaspersky, clients running Windows 95, 98 or ME can only be deployed using a login script associated with the setup files in a shared directory.

The entire eTrust environment may be managed from the server running the administration component. A network view based

ADVERTISEMENT

on IP subnets will discover and display all systems that have the eTrust software installed. Systems are managed by placing them into containers that can be used to represent logical or physical views of the network. To add a system to a container, it must first be authenticated. This is problematic for Windows 95, 98 and ME systems, as user accounts are managed locally, so a DOS utility is used to create a special authentication file.

Policies control how systems run the software and react to infections and, once assigned, they can be locked down to prevent users modifying the settings. Policies are also used to schedule regular on-demand scans and distribute new virus signature files, although for the latter there are minimal control options. The supplied quarantine rules apply to users and not files, so you can block network access to a system with an infected file for a specific period.

Users will find a new icon in the System Tray indicating the real-time scanner is active. They can view and modify its configuration, but if central settings have been applied and locked down they'll find the OK button has been greyed out. A local copy of eTrust InnoculateIT is also installed, allowing users to run their own on-demand scans. Alerting has always been a strong point of eTrust products, and the Alert Manager service supports masses of notification options that can be applied separately to the on-demand and real-time scanners.