VIPRE Business

Low-Resource Business Antivirus & Endpoint Protection

Kiss Your Antivirus Bloatware Goodbye...

Frustrated with Symantec, McAfee, Trend Micro, and other slow, bloated, hard-to-manage corporate endpoint protection? Say hello to an all-new technology that will make end-user threat management faster and easier than you ever thought possible.

The GFI VIPRE Antivirus Business product line gives you seamless, tightly-integrated security solutions that deliver antivirus and antispyware protection, client firewall, and malicious website filtering technologies that protect against the ever-changing and sophisticated wave of malware in a comprehensive, highly efficient manner.

Why Choose VIPRE Antivirus Business?

• High-performance technology that won't slow down your users' PCs
• An easy-to-use management console that gets you up and running fast
• Low RAM usage and more efficient scanning intelligence than older tools
• Next-generation malware detection technologies protect against zero-day threats

Has VIPRE been Antivirus Certified?

That's a yes. VIPRE is West Coast Labs Checkmark 'Wildlist' Anti-Virus Desktop certified, and the world's premier antivirus lab Virus Bulletin said about VIPRE: "Perhaps one of the most long-anticipated VB100 appearances, ...it is with great excitement that we finally get to record and report some results." Virus Bulletin continued in their VIPRE review (tested on Windows 7): "The WildList proved no obstacle despite the set of tricky Virut samples, and with no false positives either VIPRE earns a VB100 on its first appearance; we hope to see many more." VIPRE has been tested by Microsoft and is officially compatible with Windows 7 as per September 2009 (VIPRE is also approved for Windows XP and Vista).

How does VIPRE malware detection compare to competitors?

As mentioned above, Virus Bulletin has been testing antivirus products for years. Apart from their VB100 certification, they have another interesting test called RAP. It's for "Reactive and Proactive", and helps you form an impression of the heuristic and generic proactive detection capability of security software products - in particular how well products perform against malware that appears after vendors have submitted their products to Virus Bulletin for testing. They create a quadrant a few times a year, and compare all products they have tested. And as you can see, VIPRE does EXCELLENT in this test, compared to all the other products out there. Top right in the quadrant is highest quality. Here is the August 2010 one: VB RAP Test August 2010.

Comparison Chart

Real-Time Live Treat Data Integration

VIPRE Business benefits from multiple sources for its threat definition updates with live threat data from GFI Labs™ integrated directly into VIPRE. GFI Labs processes tens of thousands of malware samples a day and leverages the following:

• ThreatNet™ - GFI's user community of hundreds of thousands of VIPRE consumer users that anonymously send information on possible threats to GFI.
• GFI Sandbox™ - the leading automated malware behavior analysis tool for fast and autonomous analysis of large volumes of malware samples.
• ThreatTrack™ - GFI Labs' data feeds that include the latest malicious URLs used to block bad websites and phishing emails.

"Consumes Less Resources, Has Higher Scan Speed"

The independent Tolly Group confirms this in their September 2009 Anti-virus Performance Test Report: "Consumes up to 38% and 45% less memory, and offers up to 2.6x and 3.6x scanning speed compared to Symantec and McAfee."

A different approach to malware protection

VIPRE against the competition

Today, traditional viruses make up only about four percent of the total current malware universe - and are relatively easy to detect and remove. Protecting against the new wave of malware that has emerged over the last five years requires a fundamental shift in how technology is engineered to stay one step ahead of organized cyber criminals. Given the need for increased threat protection, many vendors have responded by retooling their existing antivirus products and adding new layers of antivirus capabilities, rather than building better, more efficient core code. The resulting solutions tend to be bloatware that dramatically impact system performance.

GFI's approach is different. We've translated our years of experience in researching, detecting, and remediating sophisticated malware into the next-generation endpoint protection technology, VIPRE -- without building on older generation antivirus engines or other sourced technology components. VIPRE Antivirus Business is fast, efficient technology in a single, powerful threat engine with low impact on system resources.

Cutting-edge Proactive Protection

VIPRE's advanced security technology is famous for being in the front lines in the battle against new and unknown malware, known as 'zero-day threats'.

• VIPRE's Active Protection™ delivers real-time monitoring and protection against known and unknown malware threats. Active Protection works inside the Windows kernel (the core of the operating system), watching for malware and stopping it before it has a chance to execute on your system. (Other anti-malware products allow the malware to run on your computer to try and watch for bad behavior which is less safe).
• MX-Virtualization™ analyzes malware in real-time, in a secured memory "lock box" that emulates Windows. MX-V fools the malware into thinking it has taken over your PC. MX-V allows VIPRE to observe how the malware behaves and kill it before it infects a machine. MX-V technology is the safest way to protect against zero-day threats.
• VIPRE's Genscan™ and Cobra™ heuristics use super efficient dynamic pattern assessment to determine if something is malware. Powerful, comprehensive scanning agent technology The VIPRE Business agent is based on the same advanced technology as VIPRE for consumers. VIPRE Business utilizes a high speed threat scanning engine that can scan large volumes of information for malware threats in a short period of time with limited performance impact on the end user's machine. VIPRE's innovative antivirus solution has optional agent user interface, users can stop and start scans and manage their own quarantine if you choose to give them access.

The configurable dashboard gives you a centralized, policy-driven malware management console with multiple methods of deployment that work!

VIPRE Business supports multiple methods of agent deployment to allow you flexibility in how agents are pushed to your users' systems. Within the Admin Console, an agent deployment wizard helps you select a deployment option and assists you with your deployment configuration. (Silent push install, MSI file, AD Policy based on OU's, IP range and machine lists).

Administration Console and VIPRE Business Services

• Operating System
  • Windows 7 (32- & 64-bit)
  • Windows Server 2008 SP2, R2 (32- & 64-bit)
  • Windows Vista SP2 (32- & 64-bit)
  • Windows Server 2003 R2+ (32- & 64-bit)
  • Windows XP Professional SP3 (32- & 64-bit)
  • NOTE: Embedded OS are not supported
• Hardware
  • Pentium III 400 MHz or higher
  • 300 MB free disk space
  • 512 MB memory
  • 1024 x 768 monitor resolution
• Miscellaneous
  • MDAC 2.6 SP2 or later
  • Internet Explorer 6 or later
  • Microsoft .NET Framework 3.5

VIPRE Business Agent

• Operating System
  • Windows 7 (32- & 64-bit)
  • Windows Server 2008+ (32- & 64-bit)
  • Windows Vista, Vista SP1+(32- & 64-bit)
  • Windows Server 2003 SP1+ (32- & 64-bit)
  • Windows XP SP1+ (32- & 64-bit)
  • Windows 2000 Server with SP4 RU1 or later
  • Windows 2000 Professional with SP4 RU1 or later
  • Windows Embedded for Point of Service (WEPOS)
  • Windows Installer Provider is required on XP 64bit and Server 2003 platforms in order for WMI deployment to function (all other supported operating systems have the Windows Installer Provider built-in.)
• Hardware
  • 150 MB free disk space
  • 512 MB memory
• Miscellaneous
  • Internet Explorer 6 or later
  • Supported Email Applications: Outlook 2000+, Outlook Express 5.0+, Windows Mail on Vista, SMTP/POP3 (Thunderbird, IncrediMail, Eudora, etc.)
  • SSL supported in Outlook and Outlook Express only.

VIPRE Business for Mac: Minimum System Requirements

• Intel based Mac computers
• Mac OS X 10.5.6 (Leopard) or greater operating systems
• 150 Megs of hard disk space
• 512 megs of RAM

First Things to Consider When Installing VIPRE® Enterprise Products

This document is designed to highlight the most common "Best Practice" topics for customers implementing VIPRE Enterprise and provide tips that can assist with installation and important configurations.

Policy Settings

• It is vital to the protection of your environment that you appropriately configure Remediation, Active Protection (AP), and Scan Schedules policy settings.
• Policies are configured based on either the Default Policy or any of several Policy Templates included with the product.

  The Default Policy is completely passive: Active Protection (AP), email protection, scanning remediation actions, and Firewall (Premium version) are all turned OFF.

  Policy Templates, however, do have some of these settings turned on, depending on the template. Check the properties of the policy before installing Agents over your network.

• Exceptions – Always Allowed policy settings: The Always Allowed should include items listed in the Microsoft support article (http://support.microsoft.com/kb/822158) so that those areas are not scanned, thus avoiding issues with servers and operating system

  Note: Wildcards (* and ?) for Always Allowed are supported for adding exceptions. “%” is not a valid wildcard. Wildcards for Always Blocked are NOT supported. See “Wildcards” in the Help for more information.

3rd Party Firewall Settings for Deploymen

To deploy an agent, you will need file and print sharing (TCP ports 139 and 445) and/or WMI (TCP port 135) opened. TCP port 18082 must be opened outbound to communicate with the server. TCP port 18086 is recommended for inbound communications from the server to the agent.

Other Antivirus and/or Firewall Products Already Installed

If you are switching from another antivirus and/or firewall vendor to VIPRE Enterprise, you must ensure that the old product(s) is/are completely uninstalled and that the machines have been rebooted. Sunbelt provides easy-to-use uninstaller tools for most products at http://www.sunbeltsoftware.com/Business/VIPREEnterprise/Agent-Uninstallers/.

Email Scanning and Microsoft Exchange

Enterprise is designed to scan files in Microsoft Outlook or any other email program at the end-user level, not at the Exchange level. VIPRE protects against any malware threats received or sent through Outlook. For Exchange level protection, we recommend Sunbelt's VIPRE® Email Security for Exchange.

Additional Support Topics

For additional support information, please visit the Sunbelt Software Knowledge Base http://support.sunbeltsoftware.com. Under Product, select "VIPRE Enterprise Premium 4.0 Articles" or "VIPRE Enterprise 4.0 Articles" from the drop down menu and click “Search.” You can also specify a text string for specific topics.

The following documents are also available for product support information

• Help: Detailed information is available by pressing F1 from any screen in the Console.
• Getting Started Guide (37 pages): Gets you started from installation/configuration to running scans and reports with best practices information supplemented.
• Upgrade Guide (8 pages): Upgrade instructions from any of the Sunbelt Enterprise products (3.1 and prior) to 4.0.
• Admin Configuration Guide (13 pages): A more technical guide with best practices.

VIPRE Enterprise Frequently Asked Questions

+ What are the resources needed on the Server and Agent?

We will use about 100-150 Meg of RAM on the Server. Agent memory consumption is typically around 10 to 20 megs during Active Protection. During a scan it can get up to 60meg.

+ Does it support Terminal Server and Citrix?

VIPRE Enterprise supports both TS and Citrix environments. It's a simple case of running an agent on these servers and the "sessions" but you still need to run VIPRE agents on the workstations so that they are protected locally. Licensing for TS and Citrix is super simple. You just pay for one agent on that server

+ Does this product scale? Can I support 20,000 users?

The default database for storing information is an Access MDB file (no need to install Access). Alternatively you can specify any MSSQL 2000 server or above including MSDE and SQL Express as the location data is kept, and this easily supports 20,000 users. You may need to spread this over several servers to balance the load though. Polling can be configured as can the location where the definitions are pulled from. We have one customer running 14,000 users on one server with ease.

+ Can we hide the icon from the end-users? I know the end-users cannot do anything with the icon, but some (as I'm sure most do) will instantly start blaming their age-old computer issues on the newest icon in the tray. Can we hide it?

Yes you can. It is under the Agent tab for the policy and it is set to off by default

+ My users do not have local admin rights, so I'm safe against malware, right?

Local admin rights are not needed to install many types of malware. It certainly helps if users aren't local admins but it's far from 100% effective. A lot of malware gets installed under the radar.

+ How do I cost justify this tool to management?

Easy. A recent survey filled out by 1,000 system admins showed that it takes an average of 20 minutes to clean up a machine infected by spyware. Take the average hourly cost for an admin, and you can do three manual "disinfections" per hour. Run the eval for a month and you'll get an idea of the amount of infections. And that is just *your* hourly wages. Include the lost time of the employee! Apart from all that there is the threat to the security of your company. How much is the cost of an average security breach? The lowest estimate is in the tens of thousands of dollars even for a small business.

+ How do I protect home users, and road warriors with laptops?

You can deploy VIPRE Enterprise agents to your laptop users as long as they will have the ability to communicate back to the VIPRE Enterprise server on occasion. Additionally, VIPRE has a 'client' version that operates stand-alone and has additional active-protection anti-malware safeguards. It uses the same malware risk database as the Enterprise version and updates itself over the Net. You can license these separately. You can find more information about VIPRE Antivirus + Antispyware consumer version on this site.

+ Do I need any scripting at all, to deploy agents or to drive command line interface scanning like some other tools?

None of that is needed. Everything is driven by your 'Malware Command Center' Admin Console. If the VIPRE Server detects that a machine has no agent where one is supposed to be, it will push an agent down to that workstation.

+ Will the VPN we run prevent remote users from infecting my network?

No. Virtual Private Networks (VPN) provide a secure, encrypted tunnel between a remote user and the network through your firewall. If the remote user's machine has malware, the VPN will transmit that code through the firewall directly into your network without detection. VIPRE properly deployed on all the workstations on your network is the only way to ensure detection.

+ How does the pricing work for VPE?

Volume discounts apply depending on the number of seats you get, and roughly lie between 20 and 34 dollars per seat, based on a simple sliding scale. For more information contact a Sunbelt Sales Representative or your Reseller.

+ How do I deploy VPE in my network?

Rolling out agents was never easier. Simply assign machines to a policy and the agents get pushed out via a silent install. As well there is an automatic deployment functionality where machines can be specified by IP address, IP ranges, IP subnet, machine name, and Active Directory OU. Additionally, the agent can be created as both an MSI file and executable, you can also use SMS, login scripts, or even a webpage to download the agent to any workstation.

+ Is Windows Server 2008 supported by VPE and its agents?

Yes, both 32 & 64 bit

+ Is Vista supported by VPE and its agents?

Yes, all flavors including 64 bit.

+ How do I upgrade my CounterSpy Enterprise agents to VPE agents?

Once the VPE server has been upgraded, the simplest way to update the agents is by setting them in the policy(s) to automatically check for software updates. This setting is located under the "Advanced" button on "Agent" tab of the policy. NOTE: If you have more than a 100 agents on a single policy you may want to create a copy of the policy, set it to automatically upgrade the agents and then move a 100 agents at a time to the new policy so as to not overload your network with upgrading agents.

+ How do I upgrade my CounterSpy Enterprise to VIPRE Enterprise (VPE)?

Upgrading the server is a simple process of running the VIPRE Enterprise installer on the CSE server, all existing information and settings will be migrated.

+ Where can I find more FAQs about VIPRE Enterprise?

This VIPRE Enterprise white paper has more FAQs. Check out the last three pages.

+ Is the ability to schedule a reboot now available?

Yes, there is an article under http://www.sunbeltsoftware.com/support/documents titled VIPRE Enterprise Agent Upgrades that covers all the details regarding how to upgrade agents, including scheduling reboots.