Hi Everyone. I am a new member of this forum and wanted to get some feedback about something, I have done some googling and even searched other forums but so far no information or say details are available. During a recent analysis and best practises review for a global bank in downtown NewYork I happened to be in a meeting with a consultant from Symantec. The bank is revewing their AV and desktop issues. The Symantec consultant was lecturing on issues regarding scans, 10 level deep and other tweaks in the latest AV ver 10 which in my opinon is doing a much better job then the previous ones. During his talk he quickly mentioned that there is a company which if he mentioned or talked more about and if symantec found out that he had told us about that company it would not be a good thing cause this company is the the ultimate nightmare in competition..... that was enough information for a person like me to start digging....but somehow being in the field of security I had not heard of it before and there are things as we all know that we have not heard of ....... The company is called securewave.com , their website is quite detailed and recently they partnered with citirx.com as well... I want to know if there are real users out there who have their products and what do they say...... Symantec is getting on my nerves now and they are trying to sell us more stuff while they really do not have any real answers , they say that they have but they really do not, like a few days ago when wmf thing happened, them and qualys, which is another bogus product they announced that they have now signatures to look for the vulenrability, guess what when i asked them to educate me on what dll or exactly what are their scanners looking at when they scan in a windows pc to identify if that vuln exists, it was unbelievale what they said, well quals took 3 days to get back meanwhile MS announed a patch, and symantec never answered back the ticket was still open..... the answer what quals gave was that they just check for the os version, meaning they just fingerprint os and by just doing that stupid scan they announced that they had a QID, thats what they call their signatures, now as far as I remember there are atleast 100 signatures they have which all fingerprint os's i mean thats what they do best anyways, so symantec is kinda off, the purpose is not to bad mouth, ofcourse there are some things which these companies do better then many others but slowly and gradually they are moving into aquiring other businessess and not being the true service providers... I am waiting for the old trend to return where we would develop inhouse solutions custom tailored to our own environments, with complete full spectrum command and control and job security .... so if there is any one in here who has heard or knows anyone who has worked with them , all info is appreciated.. Thanks in advance and I am already learning a great deal in here ...... RFC!