Anti Virus Software 0n Cluster

Hi,
We are building a new Win2k Adv, SQL 2000 cluster.
what is the best way to install the anti virus software after the cluster
has been built....do we need to pause the the node, and then install anti
virus software etc...
Cheers Ray
Guess that depends on the software, though they all seem to act the same to
me. Trend, Norton, etc. can be installed live, from the management console
of the product. NO reboot require. Very simple process.
I think the question you need to ask is, what directory(s) should I exclude
from being scanned.
Cheers,
Rod
MVP - Windows Server - Clustering
http://www.nw-america.com - Clustering
http://www.msmvps.com/clustering - Blog
<Ray> wrote in message news:OPEfPga7EHA.1404@.TK2MSFTNGP11.phx.gbl...
> Hi,
> We are building a new Win2k Adv, SQL 2000 cluster.
> what is the best way to install the anti virus software after the cluster
> has been built....do we need to pause the the node, and then install anti
> virus software etc...
> Cheers Ray
>
|||Make sure that the antivirus program's filters excludes the
o\MSCS directory on the quorum
oall SQL data (mdf, ndf), log (ldf), Errorlog, Fulltext directories
o\MSDTC directory used by MS DTC
See KBs
http://support.microsoft.com/?kbid=250355
http://support.microsoft.com/?kbid=309422
for additional details.
HTH,
Wish you a Very Happy and Properous New Year.
Best Regards,
Uttam Parui
Microsoft Corporation
This posting is provided "AS IS" with no warranties, and confers no rights.
Are you secure? For information about the Strategic Technology Protection Program and to order your FREE Security Tool Kit, please visit http://www.microsoft.com/security.
Microsoft highly recommends that users with Internet access update their Microsoft software to better protect against viruses and security vulnerabilities. The easiest way to do this is to visit the following websites:
http://www.microsoft.com/protect
http://www.microsoft.com/security/guidance/default.mspx
|||Do not install anti-virus on a cluster host node EVER!
Antivirus Software May Cause Problems with Cluster Services
http://support.microsoft.com/default...b;en-us;250355
Geoff N. Hiten
Microsoft SQL Server MVP
Senior Database Administrator
Careerbuilder.com
I support the Professional Association for SQL Server
www.sqlpass.org
<Ray> wrote in message news:OPEfPga7EHA.1404@.TK2MSFTNGP11.phx.gbl...
> Hi,
> We are building a new Win2k Adv, SQL 2000 cluster.
> what is the best way to install the anti virus software after the cluster
> has been built....do we need to pause the the node, and then install anti
> virus software etc...
> Cheers Ray
>
|||I have not had a problem with TrendMicro ServerProtect 5.58. Exclude lots of
stuff, but it works great ;)
Cheers,
Rod
MVP - Windows Server - Clustering
http://www.nw-america.com - Clustering
http://msmvps.com/clustering - Blog
"Geoff N. Hiten" <SRDBA@.Careerbuilder.com> wrote in message
news:OcEHjyc7EHA.2124@.TK2MSFTNGP14.phx.gbl...
> Do not install anti-virus on a cluster host node EVER!
> Antivirus Software May Cause Problems with Cluster Services
> http://support.microsoft.com/default...b;en-us;250355
>
> --
> Geoff N. Hiten
> Microsoft SQL Server MVP
> Senior Database Administrator
> Careerbuilder.com
> I support the Professional Association for SQL Server
> www.sqlpass.org
> <Ray> wrote in message news:OPEfPga7EHA.1404@.TK2MSFTNGP11.phx.gbl...
>
|||Only problem I have actually experienced with anti-virus and SQL is with
tlog backups. We were storing emails in a database and the AV caught a
virus signature inside a transaction log backup file. BAD THINGS then
happened.
Geoff N. Hiten
Microsoft SQL Server MVP
Senior Database Administrator
Careerbuilder.com
I support the Professional Association for SQL Server
www.sqlpass.org
"Rodney R. Fournier [MVP]" <rod@.die.spam.die.nw-america.com> wrote in
message news:eXKBd%23c7EHA.3820@.TK2MSFTNGP11.phx.gbl...
> I have not had a problem with TrendMicro ServerProtect 5.58. Exclude lots
of[vbcol=seagreen]
> stuff, but it works great ;)
> Cheers,
> Rod
> MVP - Windows Server - Clustering
> http://www.nw-america.com - Clustering
> http://msmvps.com/clustering - Blog
> "Geoff N. Hiten" <SRDBA@.Careerbuilder.com> wrote in message
> news:OcEHjyc7EHA.2124@.TK2MSFTNGP14.phx.gbl...
cluster
>
|||I've read that article. But the corporate IT security often has more say in
whether to install the anti-virus software, though we can control what
files/directories to exclude from the scan. Often, that means all computers
must have anti-virus software installed and up to date. SQL boxes--clustered
or not--are no exception. It would be really bad for a DBA to wake up one
day finding that the SQL box is infected with a SQL Slammer like virus
because he told the management not to install any anti-virus software there.
Fortunately, we've not had any problem with running anti-virus on cluster
nodes so far.
Linchi
"Geoff N. Hiten" <SRDBA@.Careerbuilder.com> wrote in message
news:OcEHjyc7EHA.2124@.TK2MSFTNGP14.phx.gbl...
> Do not install anti-virus on a cluster host node EVER!
> Antivirus Software May Cause Problems with Cluster Services
> http://support.microsoft.com/default...b;en-us;250355
>
> --
> Geoff N. Hiten
> Microsoft SQL Server MVP
> Senior Database Administrator
> Careerbuilder.com
> I support the Professional Association for SQL Server
> www.sqlpass.org
> <Ray> wrote in message news:OPEfPga7EHA.1404@.TK2MSFTNGP11.phx.gbl...
>
|||"Linchi Shea" <linchi_shea@.NOSPAM.ml.com> wrote in message
news:OQBprUj7EHA.2180@.TK2MSFTNGP12.phx.gbl...
> I've read that article. But the corporate IT security often has more say
in
> whether to install the anti-virus software, though we can control what
> files/directories to exclude from the scan. Often, that means all
computers
> must have anti-virus software installed and up to date. SQL
boxes--clustered
> or not--are no exception. It would be really bad for a DBA to wake up one
> day finding that the SQL box is infected with a SQL Slammer like virus
> because he told the management not to install any anti-virus software
there.
Not in my opinion.
It would be really bad for the DBA to wake up one day finding that the SQL
box is infected with a SQL Slammer like virus because he didn't apply the
patches that had been available for months previous.
Note that AV software is almost always purely reactionary. It generally
needs a virus signature, which means the virus has to have been in the wild
previously.
In addition, I'm not sure any AV software would catch a virus like Slammer
that's memory resident and runs basically within the scope of an existing
application. (technically it was a worm in any case.)
So, in case you can't tell, I'm not a huge fan of AV software on SQL
Servers. :-
[vbcol=seagreen]
> Fortunately, we've not had any problem with running anti-virus on cluster
> nodes so far.
> Linchi
> "Geoff N. Hiten" <SRDBA@.Careerbuilder.com> wrote in message
> news:OcEHjyc7EHA.2124@.TK2MSFTNGP14.phx.gbl...
cluster
>
|||I have 'ownership' of the entire SQL boxes for our web site operations. I
also have significant influence on the internal operations group. No AV on
clusters and massive exclusions on SQL Servers is the rule around here. Of
course, all our servers are in heavily defended subnets that have to go
through firewalls to get to the outside world. Our network guys are pretty
good at protecting our systems.
Geoff N. Hiten
Microsoft SQL Server MVP
Senior Database Administrator
Careerbuilder.com
I support the Professional Association for SQL Server
www.sqlpass.org
"Linchi Shea" <linchi_shea@.NOSPAM.ml.com> wrote in message
news:OQBprUj7EHA.2180@.TK2MSFTNGP12.phx.gbl...
> I've read that article. But the corporate IT security often has more say
in
> whether to install the anti-virus software, though we can control what
> files/directories to exclude from the scan. Often, that means all
computers
> must have anti-virus software installed and up to date. SQL
boxes--clustered
> or not--are no exception. It would be really bad for a DBA to wake up one
> day finding that the SQL box is infected with a SQL Slammer like virus
> because he told the management not to install any anti-virus software
there.[vbcol=seagreen]
> Fortunately, we've not had any problem with running anti-virus on cluster
> nodes so far.
> Linchi
> "Geoff N. Hiten" <SRDBA@.Careerbuilder.com> wrote in message
> news:OcEHjyc7EHA.2124@.TK2MSFTNGP14.phx.gbl...
cluster
>