Comments on: Symantec Handheld AntiVirus Suite Update

yeah there are virtually none out there for the Palm OS, and there haven't been any new ones in over 2-3 years. This company also makes an antivirus app for Mac OS X.

But I assume that one might be able to infect a windows computer if you sync over an email that has a virus attachment.

I bought (must've been a fit of tempoary insanity) McAffee Palm Anti-Virus back in '02 or so...I guess I figured my new T|T was vulnerable to a BT bug or something. It was useless then and, presumably, still a useless thing. I've actually opened up an email I pulled off my POP server (intentionally) in VersaMail and tried to open the attachment. Once it did nothing and ther ohter just did a harmless soft reset.

Pilot 1000-->Pilot 5000-->PalmPilot Pro-->IIIe-->Vx-->m505-->T|T-->T|T2-->T|C-->T|T3-->T|T5-->TX

Didn't Palm OS McAfee just scan for known PalmOS virus? I remember I could get a list with just 4 known "infections".

Useless.

This is coming off my knowledge of back then.... these viruses for Palm OS were just used to target laptops when they are hotsynced.

Palm m125 December 25, 2002 to March 24 2004 > palmOne Zire 71 March 24, 2004 to March 31, 2005. Tapwave Zodiac 1 April 18, 2005 to November 2, 2005 > palmOne Zire 72 November 2, 2005 to present

I think this will answer your question:

"The 3.5 version also enables customers using Symantec Client Security deployed with the Symantec System Center console to easily install a plug-in to manage configurations and policy enforcement over mobile devices."

Norton Ghost, installed on lab computers, really annoyed me in university, but I am sure that it saved the SysAdmins from a lot of headaches. If I were in IT, I would want a way to set up all deployed handhelds with the same settings. That is what seems to be the real feature of this software.

^^

That sounds reasonable, but if so, then it seems to me that ppl are buying this "AntiVirus Suite for Palm" for just the Suite and not the AV app itself.

"Do you know the difference between an error and a mistake? Anyone can make an error, but that error doesn't become a mistake until you refuse to correct it."
-Grand Admiral Thrawn

the secret to enjoying your job is to have a hobby that's even worse

My PDAs: Visor --> Visor Neo (blue) --> Zire 71 --> Tungsten T3 (with 4 of 6 screws still remaining) ~?~> zodiac 2?

I've looked into this for other reasons, but it seems federal standards require handheld devices to have antivirus software installed to be used. Firewall also required.

What are the minimum requirements for PDAs used within the FHWA environment or used to store FHWA data?

The minimum requirements for PDAs used within the FHWA environment or used to store FHWA data are as follows:
(1) PDAs must be approved for use by the FHWA Information Systems Security Officer (ISSO) in HAIM-40.

(2) Anti-virus software must be installed on the PDAs.

(3) PDAs must require a power-on password.

(4) All PDAs must be physically labeled to show that they are FHWA property, and the label must include the appropriate contact information. The user or FHWA Information Technology (IT) representative can provide and apply the label to the PDA. The contact information should include a contact name or office and a contact telephone number, labeled such as the following:

Agency: Federal Highway Administration
Office: xxxx
Phone: xxx-xx-xxxx

(5) Each PDA must have an FHWA bar code attached. The bar code will be provided by the FHWA property management staff at the FHWA site. All PDAs are considered to be sensitive FHWA property items and must be bar coded regardless of their purchase cost.

(6) PDAs must be configured with screen-locking timeouts. After a few minutes of inactivity a password must be required to reactivate the PDA.

(7) Unless otherwise approved by the FHWA ISSO, any PDA wireless capabilities such as Wireless Fidelity (Wi-Fi) and beaming (infrared) or other infrared capabilities must be disabled during use.

( All PDA users must read and sign a PDA Terms and Conditions of Use Agreement, which will be provided by HAIM-40 upon security approval. The user signature on this document will constitute the user's agreement to abide by these terms and conditions.

Additional controls may also be required based on the types of data to be stored on the PDA or the methods in which the PDA will be used to access data or systems. These include, but are not limited to, the following:
(1) PDAs must be equipped with encryption software to encrypt sensitive data.

(2) PDAs must be configured with firewall software that blocks all incoming connection attempts.

http://www.fhwa.dot.gov/legsregs/directives/orders/137012.htm

So if you want to sell to the feds you need these things, even if unnecessary. There's a lot of money in them there taxes.

Surur

They said I only argued for the sake of arguing, but after an hour I convinced them they were wrong...

I work in a Miltary Hospital (not at the help desk ;) and for us to sync a PDA onto the desktop there are similar hoops to jump through. If you want a Palm, the hospital will issue you a IIIc and you have to surrender it at a moments notice. Gee, what would I do with a whole 8MB in such a convienient size? I can't install the desktop myself because I'm not an administrator. So whenever I forget my TX, I'm pretty much clueless as to what special appointments or meetings I may have that day. We have not taken it to the point of AV ware and firewalls. If the chief of staff ever thought about it, I'm sure he would add the requirement. Just what I need--ccapp hanging up my Palm..that would be just wonderful.

Re: FHWA specs -

Well, I guess if I ever work for the US Gov't in the Federal Highway Administration (apparently a hotbed of political and Homeland Security issues) I'll have to consider installing an AV and Firewall program on my PDA.

;)

And if that was the case, I'd still not consider Norton or McAfee - on desktop or PDA.

Larger organisations (including, I suspect, government agencies) routinely have older desktop computers running older OSs with limited (or non-existent) program updating going on - so the real danger is not from a tech-savvy PDA user who may be trying to connect to a company computer, but the failure of the organisation to keep abreast of the technology. Locking down a network from external threats only goes so far if each individual computer is a weak link.