Met with a customer today, who mentioned their security guy wanted to get another spyware scanner.

"Why?" he said. "We've got LANDesk Security Suite."

"Well, it doesn't do a good job."

So, we take a look at Security & Patch Manager > Unassigned, and there are 710 spyware definitions in there. Even so, Detected still had about twenty definitions catching on a handful of machines each. Reports > Spyware > Machines Not Scanned Recently > 7 days.... the report is 23 pages long.

We printed all this out and added http://www.droppedpackets.org/howto/manage-security/ on top.

I wish I could say that's the first time I've had this sort of conversation. Why not use it?