Actually, I can do that. My organization has about 70/30 PCs to Macs OS9 & OSX, and we had a pretty bad issue with the Macs being little virus factories for Office macro viruses.

Users would bring in the virus from home (via USB drive, floppy) and their Mac would happily spread it to other Mac users because there is no truly enterprise manageable anti-virus out there for the Mac in a large environment (until McAfee releases their new EPO Virex). Countless tech hours were spent cleaning that mess off all the "unvirusable" Macs. We haven't had ANY large scale virus issues on the PC in over 5 years.

The moral of this story is that it's not the platform, it's the complete package of installed software and the usage of a machine that adds up to vulnerability. I've said it before, you can leave a machine locked down and firewalled and never use it and be fairly secure no matter the OS...but it's cheaper and easier to just leave it unplugged.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/319/31474#31474