LANDesk AV Week One
I've been writing documentation for the LANDesk project all day and really wasn't sure I would be able to write a new post. I really wanted to do a quick little recap of the first week using LANDesk AV. It is the first major task we have really done with LANDesk and I have to say, it has been awesome so far. No major issues removing the old AV or installing the new one. One of the minor problem comes from our old AV product not being recognized by LANDesk for auto-uninstallation. We wrote a simple in-house script that checks for the old AV and uninstalls it. It works for most of our systems, but we have had a couple problems with some older versions of the old product. Not a big problem as it doesn't affect the new AV and we are already working on a script to take care of it.
One of the coolest features of the LANDesk product is that we now see in the LANDesk console all files that are on the network that are viral or dangerous. We can also push scheduled scans out to machines as needed to make sure they are good to go. It is an awesome product and has already found about 60 possible dangers. I love how we can see the exact file and even make an exception without having to physically go out to each machine.
Anyway, I have gotta get home to pack up and clean the condo. Later.
Technology Overkill
Wow, after I started my blog back up I slowly started adding other social techs back into the fold as well. First I went back to Twitter and more recently I have jumped back on Facebook. I have to say that I don't know how folks do it. I feel so overwhelmed with it all. I don't want to lay my lack of posts on Facebook and Twitter, but they are really a time sink. I will continue to try and stay on top of everything but no promises.
Life has also gotten pretty busy for me. Next week is vacation and hopefully it will be just the break I need. No new news on the job front but I have to say it is consuming my mind at the moment. I would love to have some kind of answer before vacation, although I know that I am the only one on that timeline.
Once I get back from vacation I will be 100% into the biggest project I have been in charge of at the HUB. We will be using LANDesk to remove our current antivirus and install our new LANDesk AV. We have a very short overlap time and we have to test deploy and then mass deploy. Messing with AV is pretty scary because of how deep it gets into the OS. All I have to say is thank goodness it isn't norton.
The frustration ends in…
It is so amazing how one meeting can change the tone of a day at work. It wasn't bad, just a little frustrating at times. I think it was a combination of a pet peeve of mine and the fact that wireless in the UC was even less stable than flakey. I was proud to announce at this meeting that we are finally getting rid of F-Secure. It has been a good product, but I think we are now on track to have a great AV product. I worry that we may be putting too much faith in LANDesk, but so far it has been like Google and really delivered. Anyway, just wanted to distract myself from work for a sec.
Wrapping up with LANDesk AV
Well, after a few weeks of reading, setting up and installing LANDesk AV, I have to say I am quite impressed with it. It really seems to do a better job than our current solution, while being much easier to manage and install across campus. I have 18 test machines all running it and so far we haven't had any show stopping issues.
One of the most impressive features is it's ability to be managed centrally inside of LANDesk. At all times I get to up to date information on all quarantined files, virus, spyware, etc. This give me an overview of the campus health, alerts me to possible outbreaks, and puts me in a position to cut them off before they happen. An example of this cropped up today when a couple machines with the Pharos print system joined the test group. Apparently Pharos uses some Windows exploit to run and both our current product and the LANDesk product pick this up and quarantine it. With the current solution we would have to exclude this file on each machine from the check. With LANDesk, it was a simple change in the AV setting at the core and then syncing the clients with the core.
I have to submit my final opinion on the LANDesk product by noon on Thursday, but I have to say that right now it is looking very impressive. Add to that the script Admin Systems got us to automate the removal of our current AV product, and we may be on our way to switching this July. Hopefully I can have some concrete answers by next week.
Show me the money
As I type this the Georgia legislature is holding a press conference to hopefully back off the $300 million they were asking the university system to cut out of their budgets. It is a very scary time as most of my friends are USG employees. It is very short sighted to think cutting higher education could seriously be a good thing for the state.
LANDesk AV test core
Finally got the LANDesk test core setup. We are trying to demo the LANDesk AV product and I can't wait to start testing. We meet today at 3 to talk about how we want to test, what machines we want to test, and refine our time table and goals to decide what makes the testing a success or failure. I already know we have a couple major hurdles to overcome.
Hurdle 1, we currently use F-Secure antivirus and it is not recognized by Windows or LANDesk. This creates a problem of uninstalling it easily and consistently before putting the LANDesk AV on CSU laptops. We have a few options here, but they all require some concessions on our part. For instance we could write a script to check for F-Secure, but no one currently knows windows scripting and the time involved with learning it could be outside our time table.
LANDesk AV Configuration
Another option is to only have agents with the AV product installed on machines we have physically touched. This could be a major staffing and time nightmare for our walkup locations, the opposite effect of what LANDesk was purchased for.
Hurdle number 2 is a kinda related, but how do we get LD AV to recognize F-Secure. I am not too sure it will even if we select the option for the LD AV to install but lay dorment until existing AV products are uninstalled. I know it doesn't detect it and uninstall F-Secure, but will it even know that it exists at all?
These are just the big things I am looking for, but look forward to hearing from the other full time staff regarding what they think will make a success and what will make a failure.
Getting ready for students
One of the major factors in purchasing LANDesk at CSU was to enable more freedom for our students. Currently a student who needs to install Microsoft Office will need to come in to one of the HUB's two walkup locations. This has been the common practice since we started ITP Choice in 2001. With LANDesk we hope to move out of this and enable students to install software on demand anywhere on campus.
A huge hurdle in this task is a disconnect between our student information system and LANDesk. Before an install begins we have to be sure that the person installing it is a currently enrolled, eligible student. We looked at several solutions for this including LANDesk Process Manager, but ultimately decided we could more efficiently do it with a simple authentication application.
Wednesday is here!
The best burger and fries in town
I can't even begin to tell you how excited I am for it to already be Wednesday. Tonight two awesome things get to happen. First and formost I get to see Kim again. We had a great weekend this past weekend despite us both feeling a bit under the weather, but haven't really gotten a chance to hang out this week after lunch meeting for lunch Monday. The second big thing, and far less awesome, is going to Five Guys. This place has quickly become my guilty pleasure. I know hamburgers and fries are not the least bit healthy, but nobody in fast food does them as good as Five Guys in my opinion.
These two things are powering me through a day of work that so far has been a pretty aggravating. I really need to get back to focusing on our LANDesk AV test core. Hopefully it'll be rolling this afternoon.
LANDesk goals for the week
A new week has begun at work and once again my entire focus on LANDesk and how we can continue to use it to offer better service to CSU. I have two major goals this week, test the LANDesk AV solution as a possible replacement for F-Secure, and get a license from Adobe to distribute it's products through LANDesk. We are hoping to move to the LANDesk AV this summer in order to get much reporting and management of our clients needs. One of the big benefits to this is it allows us to get realtime health reports of our student and employee machines. It also is a much smaller footprint than our existing solution, uses less resources when scanning, and can auto-deploy to machines as the LANDesk installs. I just sent in the request for a 45 day trial and am hoping to have it up and running by Wednesday.
My second goal is to get the free Adobe products into LANDesk. Mainly Flash and Acrobat Reader. I am trying to make sure I get this setup correctly with the proper agreements with Adobe, as well as looking forward to deploying updates to these products with LANDesk's patch manager. This morning I sent off the forms to Adobe to get a license to do this and I am just waiting to hear back.