[clamav-users] ClamAV and DoD Approval

[Albrecht, Thomas C]

Hi,



I'm hoping someone on this list can answer this question. I work as a defense contractor, and one (frustrating) requirement that we've had for years is that we've had to install antivirus tools on our servers, no matter the context or risk. In addition, they had to be "DoD approved" AV tools, which limited us to McAfee and Symantec. Recently, a new draft guidance came out for configuring RHEL7 servers, and they had an interesting change to their policy. We were given the option of having either McAfee AV or ClamAV installed.



My question is whether anyone in the ClamAV community knows of any guidance or changes in DoD policy that would have made ClamAV an approved AV client. If we could find that supporting guidance that would have led the DoD to change their configuration documentation, it would go a long way in letting me get approval to rip out McAfee.



Thanks for any info you might have!



Tom Albrecht



--



Tom Albrecht III, CISSP-ISSEP, GPEN

Cyber Architect, Lockheed Martin MST

***@lmco.com<mailto:***@lmco.com>

610-906-4356 (mobile)



_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

[Joel Esler (jesler)]

We've not made any special modifications to the code to enable it for use in the Government.

We are glad to see that it is available for use, however.

--
Joel Esler
iPhone

On Jul 12, 2016, at 6:56 PM, Albrecht, Thomas C <***@lmco.com<mailto:***@lmco.com>> wrote:

Hi,



I'm hoping someone on this list can answer this question. I work as a defense contractor, and one (frustrating) requirement that we've had for years is that we've had to install antivirus tools on our servers, no matter the context or risk. In addition, they had to be "DoD approved" AV tools, which limited us to McAfee and Symantec. Recently, a new draft guidance came out for configuring RHEL7 servers, and they had an interesting change to their policy. We were given the option of having either McAfee AV or ClamAV installed.



My question is whether anyone in the ClamAV community knows of any guidance or changes in DoD policy that would have made ClamAV an approved AV client. If we could find that supporting guidance that would have led the DoD to change their configuration documentation, it would go a long way in letting me get approval to rip out McAfee.



Thanks for any info you might have!



Tom Albrecht



--



Tom Albrecht III, CISSP-ISSEP, GPEN

Cyber Architect, Lockheed Martin MST

***@lmco.com<mailto:***@lmco.com><mailto:***@lmco.com>

610-906-4356 (mobile)



_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

[TR Shaw]

Actually they approved ClamAV for use in CI PL 4 & 5 since mid 2000s

iPhone says hi!

Post by Albrecht, Thomas C
Hi,
I'm hoping someone on this list can answer this question. I work as a defense contractor, and one (frustrating) requirement that we've had for years is that we've had to install antivirus tools on our servers, no matter the context or risk. In addition, they had to be "DoD approved" AV tools, which limited us to McAfee and Symantec. Recently, a new draft guidance came out for configuring RHEL7 servers, and they had an interesting change to their policy. We were given the option of having either McAfee AV or ClamAV installed.
My question is whether anyone in the ClamAV community knows of any guidance or changes in DoD policy that would have made ClamAV an approved AV client. If we could find that supporting guidance that would have led the DoD to change their configuration documentation, it would go a long way in letting me get approval to rip out McAfee.
Thanks for any info you might have!
Tom Albrecht
--
Tom Albrecht III, CISSP-ISSEP, GPEN
Cyber Architect, Lockheed Martin MST
610-906-4356 (mobile)
_______________________________________________
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/contact.html#ml

_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

[Joel Esler (jesler)]

Every branch of govt and even every service in the DoD, up until recently, had their own approval list.

--
Joel Esler
iPhone

On Jul 12, 2016, at 9:14 PM, TR Shaw <***@oitc.com<mailto:***@oitc.com>> wrote:

Actually they approved ClamAV for use in CI PL 4 & 5 since mid 2000s

iPhone says hi!


On Jul 12, 2016, at 5:55 PM, Albrecht, Thomas C <***@lmco.com<mailto:***@lmco.com>> wrote:

Hi,



I'm hoping someone on this list can answer this question. I work as a defense contractor, and one (frustrating) requirement that we've had for years is that we've had to install antivirus tools on our servers, no matter the context or risk. In addition, they had to be "DoD approved" AV tools, which limited us to McAfee and Symantec. Recently, a new draft guidance came out for configuring RHEL7 servers, and they had an interesting change to their policy. We were given the option of having either McAfee AV or ClamAV installed.



My question is whether anyone in the ClamAV community knows of any guidance or changes in DoD policy that would have made ClamAV an approved AV client. If we could find that supporting guidance that would have led the DoD to change their configuration documentation, it would go a long way in letting me get approval to rip out McAfee.



Thanks for any info you might have!



Tom Albrecht



--



Tom Albrecht III, CISSP-ISSEP, GPEN

Cyber Architect, Lockheed Martin MST

***@lmco.com<mailto:***@lmco.com><mailto:***@lmco.com>

610-906-4356 (mobile)



_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

[Jerry]

Post by TR Shaw
Actually they approved ClamAV for use in CI PL 4 & 5 since mid 2000s

Interesting; can you supply any documentation to support this?