Ositis AVStripper review

The choices for implementing network anti-virus measures are manifold, but in the last anti-virus software group test we found that some solutions can be a pain to install and manage. However, since it's now an accepted fact that the Internet is responsible for delivering the majority of viruses, it might be easier to implement protection at its point of entry to the local network rather than deploy to every workstation. The AVStripper provides just this type of protection and is designed as a perimeter defence appliance that drops easily into your network.

It protects by scanning seven protocols and will block viruses in both incoming and outgoing traffic so it can stop local users accidentally sending infected files. The AVStripper is designed to run a variety of anti-virus engines including McAfee, Trend Micro or Sophos and the review system came powered by Panda. The choice of engine is yours and a slick feature is the ability to change to another vendor simply by entering a different serial number from the browser interface. Signature file updates are also carried out automatically, and the selected vendor's website is checked once an hour for updates.

We found installation as easy as Ositis claims and had the appliance up and running on our test network in less than an hour. It functions as a bridge, so no server or workstation configuration is necessary. Just drop the appliance into a suitable location in your network, say behind a firewall, access it via a browser, modify the interface IP addresses to suit and away you go. The browser interface is well designed and easy to use, with all menu options neatly organised down one side. A home page keeps you updated on general status with read-outs on connections and traffic statistics for both network interfaces, the number of files scanned for each protocol and viruses detected.

The AVStripper doesn't mess about when it spots an infection. It simply renders the infected file unusable by chopping large chunks out of it and replacing them with text messages advising that a virus has been found. During testing, we attempted to download infected ZIP archives and, although they appeared to have been successfully retrieved, we found they had been rendered useless. Opening the archives with Notepad revealed a text message advising us of the virus type and the source location.

The AVStripper keeps a comprehensive log file, but all notification is by email and you can enter multiple addresses. The device defaults to scanning traffic on standard ports, although it's possible to add non-standard ports to the process as well. Extra routes may be added if required and you're able to declare specific websites as trusted so any data received from these won't be scanned. Anti-virus behaviour may be modified by selecting a scanning depth and a macro virus-detection level. On the highest setting, the AVStripper will intercept and hold all files until they've been fully scanned, while four heuristic modes are used to detect macro viruses.

The AVStripper truly impresses, as it's extremely easy to install, configure and manage and will appeal to smaller businesses that neither have the time nor the technical expertise to deploy software-based anti-virus measures.

Author: Dave Mitchell