Best Way for securing DC aginest Virus & Worm

[Lus]

hi

what is best solution for protecting DC from Virus & Worm ?

what is best Antivirus ?

best GP config ?

should i use third company Firewall or windows firewall is good ?

any experince would help me ?

[chilifrei64]

The best way to do it it make sure your domain controller is NOT also the connection to the internet.. It should be behind a firewall. On the lan side.. you dont need a firewall and depending on how much time you have would dictate weather or not you put one on. The LAN, for teh most part is secure and doesnt need a firewall. Limiting communications to the lan on your DC can cause other problems.. all of which can be worked around but once again.. that depends on how much time you have

As far as AV goes. I personally like symantec corp 10. works great and has the realtime scan.

As far as best GP config.. GP is normally used to tailor the configuration to your network. Instead of GP, keep your server up to date and dont use it. if it is not exploitable(all holes patched) and there is nobody to download spyware on it.. then you shouldnt have a problem with it