What antivirus solution does the Irish Government use?

alka5eltzer

Just wondering what brand / solution they use on their systems... such as Sophos, McAfee or Kaspersky etc.

horgan_p

They wont have any one brand.
There may be edge firewalls from Fire eye, IPS/IDS from a different company and then a different desktop solution at minimum.

And different depts may buy different products. There isnt one simple answer for you.

PatrickSmithUS

It'll be the best of the best. If it wasn't then not alone would they run the risk of a national scandal but there'd be a good chance that they'd end up having to pay a GDPR breach fine.


Tulsa got in a bit of hot water on that front a while back.

Joe Exotic

alka5eltzer wrote: »

Just wondering what brand / solution they use on their systems... such as Sophos, McAfee or Kaspersky etc.

Each department will probably have their own instance as they mainly have seperate procurment and seperate emvironments.

But all will have an enterprise level AV from probably one of the big vendors

PatrickSmithUS

PatrickSmithUS wrote: »

It'll be the best of the best. If it wasn't then not alone would they run the risk of a national scandal but there'd be a good chance that they'd end up having to pay a GDPR breach fine.


Tulsa got in a bit of hot water on that front a while back.

In my experience, the opposite of this post is true.

Its a good thing there are no major secrets in this country because if there were well..

GarIT

Deleted User wrote: »

In my experience, the opposite of this post is true.

Its a good thing there are no major secrets in this country because if there were well..

How do you know? :pac:

GarIT

alka5eltzer wrote: »

Just wondering what brand / solution they use on their systems... such as Sophos, McAfee or Kaspersky etc.

What is "the government" the TDs? The department of the Taoiseach? Leinster House? or the 18 government departments and 208 government agencies, where almost all of those have their own ICT team or department?

GarIT

GarIT wrote: »

How do you know? :pac:

I was being facetious, as you know.

GarIT

[Deleted User] wrote: »

I was being facetious, as you know.

I know, I was joking that if there were secrets by definition we wouldn't know.

GarIT

GarIT wrote: »

I know, I was joking that if there were secrets by definition we wouldn't know.

Most of this country's secrets are in paper files guarded by nuns.

Impossible to hack.

PatrickSmithUS

Deleted User wrote: »

In my experience, the opposite of this post is true.

Its a good thing there are no major secrets in this country because if there were well..

What experience?

loyatemu

Joe Exotic wrote: »

Each department will probably have their own instance as they mainly have seperate procurment and seperate emvironments.

But all will have an enterprise level AV from probably one of the big vendors

there's an Office of Government Procurement that was setup to stop departments and other govt bodies from all doing their own thing. They generally setup "frameworks" of approved suppliers that individual govt organisations can buy from. There's one for Security Software that I would guess includes AV.

Hotblack Desiato

Deleted User wrote: »

Most of this country's secrets are in paper files guarded by nunswhich disappeared in mysterious 'fires'

FYP

On topic, obviously every organisation will have its own solution. Government bodies don't all share one big happy network and don't take each others' output on trust either - and nor should they.

BTW the thread title and OP seem to naively think of AV as the first (or only :eek: ) layer of defence in an organisation, in reality if a threat gets as far as your desktop or server AV then somebody has fcuked up somewhere - that's your last layer of defence.

Hotblack Desiato

Frameworks include multiple suppliers and usually differing products/solutions. There is no good reason to have all of government on the same AV, for instance.

smuggler.ie

horgan_p wrote: »

There may be edge firewalls from Fire eye, IPS/IDS from a different company and then a different desktop solution at minimum.

This FireEye ?
https://www.breakingnews.ie/world/us-cybersecurity-firm-victim-of-hacking-by-national-government-1048510.html

horgan_p

smuggler.ie wrote: »

This FireEye ?
https://www.breakingnews.ie/world/us-cybersecurity-firm-victim-of-hacking-by-national-government-1048510.html

Everyone is smug until they get caught out. At least Fire Eye put their hands up and released tools to mitigate the potential for problems.

Fire Eye should be applauded for how they are dealing with this. Other companies wouldn't have said a word until the bad guys had begun knocking over networks.

smuggler.ie

horgan_p wrote: »

Everyone is smug until they get caught out. At least Fire Eye put their hands up and released tools to mitigate the potential for problems.

Fire Eye should be applauded for how they are dealing with this. Other companies wouldn't have said a word until the bad guys had begun knocking over networks.

As per article, breach date was not reveled - it could be weeks/months/years

un5byh7sqpd2x0

smuggler.ie wrote: »

As per article, breach date was not reveled - it could be weeks/months/years

March 2020.

smuggler.ie

Blaze Purple Nachos wrote: »

March 2020.

Is that official? Any links

6 months is long enough to do damage.