FW: Worms versus Bots

I see times more typically in the 5 - 10 second range to infection. As
a test, I unprotected a machine this morning on a single T1 to get a
sample. 8 seconds. If you can get in 20 minutes of downloads you're
luckier than most.


It is amazingly simply to pull an ethernet cable out
of the back of your box to update a box from a CD....
especially in a suspect environment where you have
had many problems.

I have had the displeasure of having had to go from
box to box and clean each individually and while many
problems were stopped by Netscreen at the door, we
still had to run enterprise protection per machine as
a second line of defense and separate domains in the
company for greater protection between the groups.