blocks|key|5904420|text|我发现这是一个稳定的解决方案，捕捉到了一些病毒，并没有使用太多的CPU。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|entityMap^0^^$0|@$1|2|3|4|5|6|7|C|8|@]|9|@]|A|$]]]|B|$]]

I found this to be a stable solution that caught some viruses and didn't use too much CPU.

blocks|key|5904226|text|为什么不设置某种虚拟机并使用快照定期重置它们的机器呢？这样，任何通过AV的viri/trojans都可以很容易地被清除掉。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|5904227|如果你想更进一步的话，还会有更多的专门软件针对图书馆/网吧。|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|E|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|F|8|@]|9|@]|A|$]]]|D|$]]

Why not setup some sort of virtual machine and use snapshots to reset their machines regularly? This way any viri/trojans that get past the AV can be wiped out easily.

There is also more specialised software to do this aimed more at libraries/internet cafes if you want to take the idea further.

blocks|key|5904255|text|我喜欢EK的回答-或者，您可以设置一个VM主机，您可以在其中安装一个基本的windows安装，您的用户请求一个，您启动它-他们使用它，使它感染等，然后你杀死它，当他们完成。下一个请求来了，再次启动干净的映像-取决于服务器，您可以有多个版本的窗口运行等等。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|entityMap^0^^$0|@$1|2|3|4|5|6|7|C|8|@]|9|@]|A|$]]]|B|$]]

I like EK's answer- alternatively you could setup a VM host in which you could have a base windows xp install on it, your user requests one, you boot it up- they use it, get it infected etc, then you kill it when they are done. Next request comes in, boot the clean image again- and depending on the server, you could have multiple versions of windows running etc.

blocks|key|5904294|text|同意EK和AliGibbs。我将使用Virtual并使用快照功能。配置XP虚拟机，更新它，安装firefox或or，获取快照，然后将其病毒化。当它被感染时，回滚到快照，这是非常简单的，你可以教你的用户去做，然后再次冲浪。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|5904295|我从来没有使用过HVAP，但我使用过ClamAV，它就像糖蜜一样慢。我认为您必须有一个非常强大的盒子，才能在代理配置中运行它，并防止用户以缓慢的速度将眼睛挖出来。我使用了一个IronPort，它提供AV和内容过滤等功能，而且它很漂亮，而且fast...and也很昂贵。所以这可能不是你想要的，但它会做你想做的。它可以用于代理配置、在线或从防火墙重定向.|5904296|编辑：|5904297|5904298|我不知道这是否违反了EULA，因为我不是专家，但是当您回滚到快照时，激活窗口也会回滚。至少在虚拟盒上有XP。我不知道这是否合乎道德/伦理/法律，这取决于你。您也可以安装linux作为客户操作系统，因为这是免费的。除非他们需要XP来进行病毒冲浪活动。有很多预装/配置可下载的图像供各种发行版下载，我喜欢Linux，因为它最适合XP用户体验。|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|J|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|K|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|L|8|@]|9|@]|A|$]]|$1|F|3|-4|5|6|7|M|8|@]|9|@]|A|$]]|$1|G|3|H|5|6|7|N|8|@]|9|@]|A|$]]]|I|$]]

Agree with EK and AliGibbs. I would use Virtual Box and use the snapshot feature. Configure an XP virtual machine, update it, install firefox or chromium, take a snapshot and then virus it up. When it gets infected, roll back to the snapshot, which is really simple, you could teach your users to do it, and then surf away again.

I've never used HVAP, but I have used ClamAV and it's slow as molasses. I'd think you would have to have a pretty beefy box to run it in a proxy config and keep the users from clawing their eyes out with the slowness. I have used an IronPort and it provides AV as well as content filtering and the like, and it's nice and fast...and expensive. So it's probably not what you're looking for, but it will do what you want. It can be used in a proxy config, in-line, or redirected from firewall.

Edit: 
I don't know if this is a violation of the EULA, as I'm no expert in that, but When you roll back to the snapshot the activation window rolls back as well. At least with XP on virtual box. Up to you whether this is moral/ethical/legal, as I don't know. You could also install linux as the guest OS as this is free. Unless they need XP for the virus surfing activity. There are plenty of pre-installed/config'ed downloadable images for a variety of distro's. I like Linux Mint for the most XP-user-friendly experience.

blocks|key|3903397|text|也同意VM是一个很好的解决方案，在魁贝斯(alpha)和ImmunOS+(beta)之类的东西中，这种方法可能会变得更容易。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|3903398|为了真正解决您的具体问题，我们已经在几个小型远程办公室在pfSense上使用了HAVP一段时间。将其配置为在同一个pfSense框上的squid作为透明的上游工作需要一些修改，但一旦启动和运行，它似乎就能正常工作，尽管对于相同数量的用户来说，比路由器或代理可能需要的硬件稍微多一点是有用的。由于股票扫描器基于ClamAV+(商业AV引擎也可用)，所以您可能希望确保它与当前签名兼容，因为ClamAV的更新现在禁用了扫描仪版本<+0.95。|entityMap|0|LINK|mutability|MUTABLE|url|http://threatpost.com/en_us/blogs/researcher-releases-qubes-hardened-os-040710|1|http://www.pentest.es/inmunos.php^0|H|3|0|S|7|1|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@$A|P|B|Q|1|R]|$A|S|B|T|1|U]]|C|$]]|$1|D|3|E|5|6|7|V|8|@]|9|@]|C|$]]]|F|$G|$5|H|I|J|C|$K|L]]|M|$5|H|I|J|C|$K|N]]]]

Agree as well that a VM is a good solution, and with things like <a href="http://threatpost.com/en_us/blogs/researcher-releases-qubes-hardened-os-040710" rel="nofollow noreferrer">Qubes</a>(alpha) and <a href="http://www.pentest.es/inmunos.php" rel="nofollow noreferrer">ImmunOS</a> (beta) in the works this approach may get easier.

To actually address your specific question, we've used HAVP on pfSense at several small remote offices for a while. Configuring it to work as a transparent upstream for squid on the same pfSense box took a little fiddling, but once it was up and running it seems to work fine, though a little more hardware was helpful than a router or proxy might otherwise need for the same number of users. Since the stock scanner is based on ClamAV (commercial AV engines are available as well) you may want to make sure it's compatible with the current signatures since ClamAV's updates are now disabling scanner versions &lt; 0.95.

blocks|key|5904340|text|我也喜欢VM选项。另一个选项是App，这样你就有了一个真正漂亮的沙箱，没有访问本地机器的权限。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|5904341|格雷格|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|E|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|F|8|@]|9|@]|A|$]]]|D|$]]

I like the VM option too. Another options would be to App-V Internet Explorer so you have a real nice sandbox with no access to the local machine.

\\Greg

blocks|key|3903635|text|每个桌面上的虚拟机都是一个很好的方法。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3903636|但是，不要在盒子里安装XP，而是安装一个带有Firefox的快速Linux发行版。小狗Linux可以安装在500+to的VMWare+VHD上，它只需要128+needs即可运行。|offset|length|3903637|因此，它应该有足够的响应性，也不应该对主机系统征税太多。|3903638|使用500+to的VHD，您可以设置它一次并分发给所有需要它的人。可以在CD或网络共享中存储您喜欢设置的已知良好系统的备份。|entityMap|0|LINK|mutability|MUTABLE|url|http://www.puppylinux.com/^0|0|15|7|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|R|8|@]|9|@$D|S|E|T|1|U]]|A|$]]|$1|F|3|G|5|6|7|V|8|@]|9|@]|A|$]]|$1|H|3|I|5|6|7|W|8|@]|9|@]|A|$]]]|J|$K|$5|L|M|N|A|$O|P]]]]

Virtual Machines on each desktop is a good way.

But instead of XP in the box, install a fast Linux distro with Firefox on it. <a href="http://www.puppylinux.com/" rel="nofollow noreferrer">Puppy Linux</a> could be installed on a 500Mb VMWare VHD and it only needs 128Mb RAM to run. 

So it should be responsive enough and also not tax the host system too much.

With a 500Mb VHD, you could set it up once and distribute this to all the people who need it. A backup of the known good system set up the way you like can be stored on a CD or a network share.

blocks|key|5904407|text|将HAVP+%2B+Clam/AV与微软的SteadyState合作，SteadyState在重新启动时恢复HDD的状态，提供比虚拟机更方便的界面。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|5904408|注意，为了正确处理操作系统和反病毒定义更新(+SteadyState在设计上存在根本缺陷)，该功能已经被合并。|entityMap|0|LINK|mutability|MUTABLE|url|http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=d077a52d-93e9-4b02-bd95-9d770ccdb431^0|J|B|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@$A|N|B|O|1|P]]|C|$]]|$1|D|3|E|5|6|7|Q|8|@]|9|@]|C|$]]]|F|$G|$5|H|I|J|C|$K|L]]]]

Team up HAVP + Clam/AV with Microsoft <a href="http://www.microsoft.com/downloads/details.aspx?displaylang=en&amp;FamilyID=d077a52d-93e9-4b02-bd95-9d770ccdb431" rel="nofollow noreferrer">SteadyState</a>, SteadyState restoring the state of the HDD when you reboot providing a more convenient interface than a virtual machine.

Note in 7 the function has been incorporated in order to correctly handle OS and anti-virus definition updates for which SteadyState is fundamentally flawed in design.

I have employees that have to search sketchy virus-ridden websites as part of their job. They all have XP and Symantec AV installed but they still get hit fairly often.

Rather then trying all sorts of desktop level solutions, I was thinking about maybe some sort of Proxy in addition to symantec for when they browse these sites?

<ul>
<li>Anyone have experience with <a href="http://www.server-side.de/features.htm" rel="nofollow noreferrer">HAVP</a>? </li>
<li>Am I going about this the wrong way?</li>
<li>If this is the right way, and free alternatives to HAVP?</li>
</ul>

Experience with HAVP

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

教程

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云智能顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云AI代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

功能1上新10个字符

功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符。

功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符。

功能5描述100个字符功能5描述100个字符功能5描述100个字符功能5描述100个字符功能5描述100个字符功能5描述100个字符

功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符

功能4上新

文章&问答评论现已支持表情

全新交互，全新视觉，新增快捷键、悬浮工具栏、高亮块等功能并同时优化现有功能，全面提升创作效率和体验

社区富文本编辑器全新改版！诚邀体验～ 

精选全网热门MCP server，让你的AI更好用 🚀

💥开发者 MCP广场重磅上线！

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

聚焦“写作效率、视觉美观与运行性能”三方面进行全面升级，为您提供更高效、稳定的创作环境

社区富文本&Markdown编辑器全新改版上线，欢迎大家体验!

诚挚邀请您参与本次调研，分享您的真实使用感受与建议。您的反馈至关重要，感谢您的支持与参与！

社区新版编辑器体验调研

作为他们工作的一部分，我有一些员工不得不搜索那些病毒肆虐的网站。他们都安装了XP和Symantec AV，但仍然经常受到攻击。与其尝试各种桌面级的解决方案，我还在想，除了赛门铁克之外，他们在浏览这些站点时，还会考虑一些代理呢？有人有HAVP的经验吗？我是不是走错路了？如果这是正确的方式，和免费的替代HAVP？

问使用HAVP的经验
EN

回答 8

Server Fault用户

Server Fault用户

Server Fault用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问使用HAVP的经验EN

回答 8

Server Fault用户

Server Fault用户

Server Fault用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问使用HAVP的经验
EN