(From Unified Redbook sg248010.pdf - p128)
10.3.8 Antivirus
Supported AV product families/access schemes are: Symantec and McAfee (via ICAP on
port 1344)
Requires external scan engines Configurable options: scan on file open, scan on file close after write, scheduled batch
scans (aka bulk scan)
ICAP on Wikipedia
http://en.wikipedia.org/wiki/Internet_Content_Adaptation_Protocol
McAfee Web Gateway
You can deploy it as a virtual machine, hardware appliance, or on a blade server.
Symantec Protection Engine
Symantec™ Protection Engine for Cloud Services supports Windows Server 2003, Windows Server 2008 64, RHEL 5.0, RHEL 6.0, Solaris SPARC 10, Solaris SPARC 11, Suse 11 and Windows 2012.
All the supported operating systems (Windows and Linux) are supported under VMware® vSphere Hypervisor™ v4.1 or later
Sophos SAV Dynamic Interface (SAVDI)
Currently only a SKD which has "A network mode allows the malware scanner to run on a separate system so threats can be scanned using either a remote or local SAVDI."
Looks like McAfee Web Gateway is the best choice as it has a Virtual appliance.
Add new comment