Symantec 10551441 Administration Guide - Page 172

172 Responding to virus outbreaks Preparing for a virus outbreak ■ Track viruses using logs. ■ Use the Central Quarantine Console to track infected computers on your network, and submit suspicious file samples to Symantec Security Response for analysis and cure. Preparing for a virus outbreak To prepare for a virus outbreak, you should create a virus outbreak plan and define actions for handling suspicious files. Creating a virus outbreak plan An effective response to a virus outbreak on your network requires a plan that allows you to respond quickly and efficiently. Table 5-1 outlines the tasks for creating a virus outbreak plan. Table 5-1 A model virus outbreak plan Task Description Ensure that virus definitions files Verify that infected computers have the latest virus are current. definitions files, and use the Virus Definition Transport Method to push new definitions if needed. See "About virus definitions files" on page 145. Map your network topology. Prepare a network topology map so that you can systematically isolate and clean computers by segment before you reconnect them to your local network. Your map should contain the following information: ■ Server names and addresses ■ Client names and addresses ■ Network protocols ■ Shared resources Identify the virus. Symantec AntiVirus logs are a good source of information about viruses on your network. If you can identify a virus from the logs, you can use the Symantec Security Response Virus Encyclopedia to learn how to remove the virus.