Author Topic: SBC Feature request  (Read 11553 times)

0 Members and 1 Guest are viewing this topic.

wpn

  • Guest
SBC Feature request
« on: August 03, 2011, 12:37:59 AM »
EDITED 25-01-2012

I would like to dedicate this thread for requesting features for (near) future updates on the SBC.
Features that are not present yet and not bugs in the current version.
Some features are taken from this thread: http://forum.avast.com/index.php?topic=54073.0


1) Active Directory integration for controlling access to SBC.
   I heard this is possibly a future feature. Just pointing out that this product is completely
   MS based and therefor should be able to have maximum integration. This means user access based
   on domain groups/users instead of locally maintained sbc users.

2) Offline VPS updates so SBC doesnt need to be hooked up to the internet for updates.
   Some users require this kind of setup, already noticed years back on the forum for ADNM.
   A ship is an example i still remember, it communicates via a private network not hooked up to
   the internet.

3) MSI file creation for other kind of deployment then using the CONSOLE.
   Possibly for restrictions on account rights with logon as service. This is not needed when the
   installation is locally executed without control from the SBC   i believe?

4) SBC to SBC migration tool, if the SBC crashes, how can we change the server that is used for
   updating without redeploying the client? In ADNM this was done with ASWCHAMS.EXE

5) Mobile device support (Android, iphone, WP7)

6) Linux / Mac support for deployment

7) Installer:
   SQL portion should contain the following:

   a) A search algorithm that detect the server as well as the instances on the server
   b) A possibility to set the windows account that will be used to create the database
   c) A test button to test if the given server\instance and account are correct

8 ) Installer:
   E-mail portion should contain the following:

   a) a test button to check if the given settings are correct
   b) a report section about the email server (which software it is and if the test was
      successful)

9) Installer:
   Mirror portion:

   A base directory setting which populates the different directory paths which have to be
   manually edited if you decide to install the mirror on another place then c:\programdata\
   The possibility to have one of the directories (like the logs) to be set to a different
   location then the base directory should stay possible. A lot of companies dictate that log
   files should not be kept on the same disk as user data.

10) SBC mirror servers inside the local network.
    See the comments from Yanto below and http://forum.avast.com/index.php?topic=79766.0

11) Control the client LOCALE setting.
    I do not wish to see dutch translations in software that I only will look into.
    I have never seen any translation that is good enough for an English based product (hence my
    disgust of having the OS in the country native language)
    I had this wish in the early beta version and my wishlist i believe, there one of the mods
    seemed to be interested in this. :)

12) (e-mail) Notification of newly ready update for the console itself
    Extracted from this thread: http://forum.avast.com/index.php?topic=82084.0

13) The ability to set the port for ISS that the console should use during installation already
    so there will be no problems with other sites already running on that port.

14) All shields controllable via normal GUI instead of partially with advanced settings

15) Adjustable e-mail template for deployment
    http://forum.avast.com/index.php?topic=83033.0

16) Apply a any task, to a single computer object without having to modify the job
    settings. This was possible in ADNM, and is a heap more efficient then having to modify the
    job properties every single time.
    So right click on the computer in the context menu should be an option with the name JOBS
    and list the defined jobs, for example DEPLOY CLIENT or UNINSTALL CLIENT.

17) Schedule a boot-time scan (so no manual planning), with the possibility that the user that  
    is confronted with the scan can cancel it.  (requested: zhaberman)

18) Make the scheduler intelligent so that when a scheduled scan window is missed because the
    client was turned of, the missed scan is not started when the client starts.
« Last Edit: January 25, 2012, 04:57:00 PM by wpn »

wpn

  • Guest
Re: SBC Feature request
« Reply #1 on: August 03, 2011, 08:16:56 PM »
bump  (to keep it in the picture)

Offline Yanto.Chiang

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1369
  • Soli Deo Gloria
    • PT Garuda Sinatriya Globalindo
Re: SBC Feature request
« Reply #2 on: August 04, 2011, 05:03:45 AM »
Additional request from me related with number 4 about copying database from existing to the new SBC.

This feature we can't see it on this new SBC anymore, since ADNM supported this things. I suggest if each new SBC could be download or appointed as secondary mirror but not as multi-SBC.

Yanto Chiang | IT Security Consultants | AVAST Premium Security | GarudaSinatriya

wpn

  • Guest
Re: SBC Feature request
« Reply #3 on: August 07, 2011, 11:43:06 PM »
Edited TS:  added point 7 8 9


@Yanto:  Do you mean you want to be able to copy the exact database from one server to another server, which then will be used as a primairy server without connecting to the server that it got copied from?

Isn't that as easy as a full database restore but changing the instance name or server name (if using a remote sql server)

Offline Yanto.Chiang

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1369
  • Soli Deo Gloria
    • PT Garuda Sinatriya Globalindo
Re: SBC Feature request
« Reply #4 on: August 08, 2011, 04:40:14 AM »
Edited TS:  added point 7 8 9


@Yanto:  Do you mean you want to be able to copy the exact database from one server to another server, which then will be used as a primairy server without connecting to the server that it got copied from?

Isn't that as easy as a full database restore but changing the instance name or server name (if using a remote sql server)

Hi WPN,

Pardon me,

What does i mean was for each the new installation of SBC which's installed in existing network which already have SBC inside there. Then the Administrator could set the mirror download of new SBC from the existing SBC.

So it most likely second mirror SBC on the network.

cheers,
Yanto Chiang | IT Security Consultants | AVAST Premium Security | GarudaSinatriya

wpn

  • Guest
Re: SBC Feature request
« Reply #5 on: August 08, 2011, 09:33:31 AM »
@yanto
aah you refer to http://forum.avast.com/index.php?topic=79766.0

ok, ill add it as point 10

wpn

  • Guest
Re: SBC Feature request
« Reply #6 on: August 08, 2011, 10:58:51 AM »
added point 11

Offline avadas.de

  • Avast Reseller
  • Sr. Member
  • *
  • Posts: 259
    • avadas.de
Re: SBC Feature request
« Reply #7 on: August 08, 2011, 10:14:58 PM »
Hi,

I also would like to see some kind of MSI deployment possibilities, tough todays deployment solutions like SCCM, Altiris, Baramundi,... aim at bigger network than 200 clients. However I think for smaller client networks GPO/MSI-based deployment is very interesting.

EDIT: Reported working already: One more thing...maybe I missed it in the list? Upgrade from former ADNM setups.
« Last Edit: August 08, 2011, 10:50:25 PM by avast.de »
Feel welcome to also visit the German Avast Community Forums for support and discussions with other security specialists as well as beginners!

Avast 19.6.2383 German Release Notes

wpn

  • Guest
Re: SBC Feature request
« Reply #8 on: August 08, 2011, 10:34:07 PM »
actually there is supposed to be an MSI file, i have seen that several times today in the installation logs files, htere is an MSI created for email deployment...

wpn

  • Guest
Re: SBC Feature request
« Reply #9 on: August 10, 2011, 02:33:17 PM »
added point 12 from reading in the given thread

wpn

  • Guest
Re: SBC Feature request
« Reply #10 on: August 19, 2011, 02:08:32 PM »
bump

wpn

  • Guest
Re: SBC Feature request
« Reply #11 on: September 02, 2011, 09:05:21 AM »
bump to keep focus...

Offline Infratech Solutions

  • Avast Reseller
  • Super Poster
  • *
  • Posts: 2142
  • Mayorista e integrador de AVAST Software en España
    • Ciberseguridad Avast para empresas y MSPs en España.
Re: SBC Feature request
« Reply #12 on: September 02, 2011, 09:31:03 AM »
Can apply a defined task to a single machine with right click (as we do in ADNM).

Offline 1tb

  • Jr. Member
  • **
  • Posts: 71
Re: SBC Feature request
« Reply #13 on: September 03, 2011, 03:29:15 AM »
Our server solution vendors want a cast iron guarantee that the AV is not impacting their solution. For example, if a vendor writes MSSQL Server based product, they generally have specific install instructions which mandate AV scanning exclusions on all of the following:

    sqlserver.exe process
    *.mdf and *.ldf files

BPP provides no GUI support to add 'Trusted Processes, like sqlserver.exe' and scan 'exclusions like *.mdf and *.ldf, *.edb and *.log *.mdb'. And there does not appear to be any way to know if the avast shields are excluding or scanning these files.

In closing we MUST have a way to easily add "Trusted Processes" from the Behaviour Shield, and "Excluded Folders and Files" from the File Shield in the GUI to satisfy our corporate solution vendor requirements.

Offline 1tb

  • Jr. Member
  • **
  • Posts: 71
Re: SBC Feature request
« Reply #14 on: September 03, 2011, 03:34:27 AM »
Corporate servers don't generally have a requirement for all the unnecessary shields (designed for the desktop). For example, we don't want P2P, IM or Mail shields running on our server dedicated as a SQL server.

Disabling unnecessary shields for a server or group of servers results in 'Unsafe' status (not Green). Currently the solution is to tweak the Advanced settings, but there is too much room for error when editing a string value. This needs to be exposed in the GUI.

Please add the ability to select a custom set of shields for a specific server or group of servers.