CA ITM means double trouble for digital invaders
Computer Associates marries anti-spyware with anti-virus
CA’s drop-down pick list makes choosing the appropriate protection engine and subsequent policy section easy and helps eliminate UI fatigue by keeping all policy management in one location. Because I knew exactly which protection engine I was working with, I was able quickly to drill into the settings I needed to modify. I found working with the policy settings in this manner to be intuitive, and it greatly reduced my overall management time.
Once various policies are defined, IT must assign them to the systems they want to protect. ITM’s flexible discovery engine scans the enterprise looking for ITM agent-installed systems, such as servers or client PCs. Because ITM is an enterprise-ready application, it includes an organizational system that allows IT to create groups and subgroups of clients for more efficient management. For instance, I created a main group that contained two subgroups, each representing a different subnet. As I discovered clients, I placed them into the subgroup appropriate for the subnet they were on.
Admins can apply policy at any point in the tree, and lower groups inherit the policies from the groups above them. This allows for one overriding policy to be assigned at the top-most level to make sure all clients have a baseline policy, but lower subgroups can have their own policies assigned to them to meet localized needs, such as defining a local redistribution server or specific exclusions.
Reporting is another area where eTrust Anti-Spyware made great strides in Release 8. Gone are the text-only reports; now admins can choose from more than 70 predefined reports. Most reports have clickable links that either drill down further into some specific in the report or provide additional information. Many of the reports, like virus and pest Top 10, also provide graphs and charts of the malware activity.
Overall, Integrated Threat Management r8 is a major improvement for eTrust PestPatrol Anti-Spyware and an excellent bundle with eTrust AntiVirus. The user interface is clean and intuitive and I like how CA breaks out the policy management for each engine. Reporting also is much improved in this release and the shared download of program and signature updates for both anti-virus and anti-spyware is a welcome addition. Real-time protection is good, but as always, could be a little better, although I have no complaints about on-demand scans and remediation.