![]() Equal levels of threat-lab staffing 7 days a week is something that CAN be done. I know the team in the threat-labs do an excellent job - ESET is still our primary product we sell and recommend - but anything that can be done to improve the product should be done in my opinion. the ransomwares we're seeing now are able to walk right past most AVs in many cases - it is the most common threat type that we see that defeats ESET protection, even walking right past v6 as you saw. again - no guarantees.Ĭlick to expand.It is good that you were able to fix your own issue and submit the threat - most purchasers don't have a clue how to reboot into safe-mode. It is just common sense to have a different threat scanning engine on that 2nd level of detection from the first - they both look for the threat, but they do so in a different way and if the 1 engine fails - HOPEFULLY, the 2nd engine detects. if they have Symantec on the desktop - use ESET on the gateway - if they use ESET on the desktops/servers - use something else that is top-quality on the gateway. We all no that no AV is 100% - this is why we're recommending that customers in business put in a 2nd layer - a gateway server - and sorry, we recommend a 2nd engine. ![]() ![]() I refuse to believe there are less threats on the weekend - it would make ZERO sense - saying that signatures coming out on Monday that could have come out on Sunday or Saturday just *has* to be a window of opportunity for threats to get past the security software. I don't know how big the team is that produce signature updates - we know some signatures get pushed out on the weekend - but if some don't, then that adds to the perception of a window of opportunity for the AV writers - and a window of exposure for the paying AV customer (no matter which product we're talking about).Ī solution would be to have the signature team work split weeks - if that means half the team working Mon-Fri - ad the other half working Wed-Sun - it should be done in my opinion.Īnother way would be split the team in 3:Įqualizing the coverage of staff would in theory equalize the signatures - which is PERCEIVED to minimize the threat window for zero-day outbreaks or new threats, or new variants. and that means we've seen a number of customer move off to cheaper products (freebies, vipre, MSE) - anything that can be done to improve the customer PERCEPTION of the solid product and a solid company, SHOULD be done. We have over X,000's and X,000's of renewal customers (we started selling ESET 9 years ago) - the loyalty is strong - but it isn't getting STRONGER in our experience - as the economy gets tougher in the US/Canada - people are being more careful with their $$$ spend. The fake AV ransomwares have had a pretty good run at walking past most AVs recently - we've probably all seen them - and unless something changes, seeing less updates on a weekend makes the consumers FEEL LESS SECURE - and confidence in the product is a big part of the decision to renew the license. I know I would if I was in that cat-and-mouse game - wouldn't you? customers see less updates and have a perception that the protection level isn't *as* great when less updates get pushed out.Īs several have mentioned - virus creators work 24x7 - if they have ANY idea that the weekend means less staff to analyze threats, when why wouldn't they release their newest and "best" creations to walk right past move AV engines on the weekends? Click to expand.I believe the point is that these days, many viruses can and have slipped past ESET's detection engines - heuristics don't catch everything, signatures (specific and generic) - are still important.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |