IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
Disadvantages:
- For terminals with external interfaces, users have to start the computer
virus scanning program located on the server manually in order to check
incoming external data media, but also to check data media and files being
sent.
- Encrypted files or programs which contain computer viruses and which are
not decrypted until they are on an unprotected terminal will cause
infections if there is no incoming check. This may also be true of
compressed files in the same way, if the scanning program is not suitable.
- It is impossible to rule out the possibility of a terminal with external
interfaces becoming infected with a computer virus.
- If use is also made of peer-to-peer functionality, computer viruses can also
be transferred between terminals without being checked by the protected
servers.
- Detrimental effect on performance, because all communication content has
to be checked.
Computer virus scanning programs on all servers and terminals
This combination of the above strategies offers the greatest protection,
because computer viruses are immediately detected when they appear and are
not distributed further via servers. In addition, computer virus scanning
programs from various vebdors can be used, so as in that way to increase the
detection rate for computer viruses.
Advantages:
- An appropriate, up-to-date and resident computer virus scanning program
ensures maximum protection while at the same time minimising effort and
complexity for the IT user.
- Computer viruses are not disseminated further via servers.
Disadvantages:
- Procurement costs and administration work for every server and every
terminal.
Computer virus scanning programs on the communication servers
Computer virus protection programs can be installed exclusively or
additionally on all communication servers, i.e. the IT systems via which data
exchange with external IT systems is carried out, for example firewalls or mail
servers. However, the effect of this is that the terminals are only protected
against computer viruses if they do not have any other interfaces, such as CD-
ROM drives etc.
Advantages:
- All files are checked at the entrance to the LAN, and not only when they
are inside.
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000