Anti-Virus Precautions

I'm about to setup my first CRM 3.0 coupled with SQL2000 dedicated server an
d
was wondering if there are any folders or file types that the anti virus
program should be excluded from scanning to prevent corruption.
Please be specific as to each program, CRM and SQL2000.
Thank you as always for your wisdom.
He has half the deed done who has made a beginning ~ HoraceI can't say about the CRM but for SQL Server at the minimum you want to
exclude:
folders with .mdf, .ndf and .ldf files
SQL Server ad related services log files
Backup files
Here is a little more info that may be helpful.
http://support.microsoft.com/kb/309422
Andrew J. Kelly SQL MVP
"WaltB123" <WaltB123@.noemail.postalias> wrote in message
news:6FE4F82C-DD2F-43CA-96CE-32C6BC5155F0@.microsoft.com...
> I'm about to setup my first CRM 3.0 coupled with SQL2000 dedicated server
> and
> was wondering if there are any folders or file types that the anti virus
> program should be excluded from scanning to prevent corruption.
> Please be specific as to each program, CRM and SQL2000.
> Thank you as always for your wisdom.
> --
> He has half the deed done who has made a beginning ~ Horace|||Thank you for the heads up. Is there a newsgroup for CRM I can post to? I
didnt see one on the managed newsgroups list.|||Hello,
You can exclude the directories where your database files, backup files and
audit files for SQL server are stored in your antivirus program. In that way
antivirus wont scan those folders.
Thanks
Prakash
"WaltB123" wrote:

> I'm about to setup my first CRM 3.0 coupled with SQL2000 dedicated server
and
> was wondering if there are any folders or file types that the anti virus
> program should be excluded from scanning to prevent corruption.
> Please be specific as to each program, CRM and SQL2000.
> Thank you as always for your wisdom.
> --
> He has half the deed done who has made a beginning ~ Horace

Anti Virus software and SQL

Does anyone have a recommenation for AV software to work with SQL that does
not impact performance.How about a recommendation from Microsoft?
Geoff N. Hiten
Microsoft SQL Server MVP
Senior Database Administrator
Careerbuilder.com
I support the Professional Association for SQL Server
www.sqlpass.org
"Richard" <anonymous@.discussions.microsoft.com> wrote in message
news:7415981C-A736-4341-972C-76F4E6F89E8A@.microsoft.com...
> Does anyone have a recommenation for AV software to work with SQL that
does not impact performance.|||Lets try this again.
How about a recommendation from Microsoft:
INF: Consideration for a Virus Scanner on a Computer That Is Running SQL
Server
http://support.microsoft.com/defaul...2&Product=sql2k
Geoff N. Hiten
Microsoft SQL Server MVP
Senior Database Administrator
Careerbuilder.com
I support the Professional Association for SQL Server
www.sqlpass.org
"Richard" <anonymous@.discussions.microsoft.com> wrote in message
news:7415981C-A736-4341-972C-76F4E6F89E8A@.microsoft.com...
> Does anyone have a recommenation for AV software to work with SQL that
does not impact performance.

Anti Virus Software 0n Cluster

Hi,
We are building a new Win2k Adv, SQL 2000 cluster.
what is the best way to install the anti virus software after the cluster
has been built....do we need to pause the the node, and then install anti
virus software etc...
Cheers Ray
Guess that depends on the software, though they all seem to act the same to
me. Trend, Norton, etc. can be installed live, from the management console
of the product. NO reboot require. Very simple process.
I think the question you need to ask is, what directory(s) should I exclude
from being scanned.
Cheers,
Rod
MVP - Windows Server - Clustering
http://www.nw-america.com - Clustering
http://www.msmvps.com/clustering - Blog
<Ray> wrote in message news:OPEfPga7EHA.1404@.TK2MSFTNGP11.phx.gbl...
> Hi,
> We are building a new Win2k Adv, SQL 2000 cluster.
> what is the best way to install the anti virus software after the cluster
> has been built....do we need to pause the the node, and then install anti
> virus software etc...
> Cheers Ray
>
|||Make sure that the antivirus program's filters excludes the
o\MSCS directory on the quorum
oall SQL data (mdf, ndf), log (ldf), Errorlog, Fulltext directories
o\MSDTC directory used by MS DTC
See KBs
http://support.microsoft.com/?kbid=250355
http://support.microsoft.com/?kbid=309422
for additional details.
HTH,
Wish you a Very Happy and Properous New Year.
Best Regards,
Uttam Parui
Microsoft Corporation
This posting is provided "AS IS" with no warranties, and confers no rights.
Are you secure? For information about the Strategic Technology Protection Program and to order your FREE Security Tool Kit, please visit http://www.microsoft.com/security.
Microsoft highly recommends that users with Internet access update their Microsoft software to better protect against viruses and security vulnerabilities. The easiest way to do this is to visit the following websites:
http://www.microsoft.com/protect
http://www.microsoft.com/security/guidance/default.mspx
|||Do not install anti-virus on a cluster host node EVER!
Antivirus Software May Cause Problems with Cluster Services
http://support.microsoft.com/default...b;en-us;250355
Geoff N. Hiten
Microsoft SQL Server MVP
Senior Database Administrator
Careerbuilder.com
I support the Professional Association for SQL Server
www.sqlpass.org
<Ray> wrote in message news:OPEfPga7EHA.1404@.TK2MSFTNGP11.phx.gbl...
> Hi,
> We are building a new Win2k Adv, SQL 2000 cluster.
> what is the best way to install the anti virus software after the cluster
> has been built....do we need to pause the the node, and then install anti
> virus software etc...
> Cheers Ray
>
|||I have not had a problem with TrendMicro ServerProtect 5.58. Exclude lots of
stuff, but it works great ;)
Cheers,
Rod
MVP - Windows Server - Clustering
http://www.nw-america.com - Clustering
http://msmvps.com/clustering - Blog
"Geoff N. Hiten" <SRDBA@.Careerbuilder.com> wrote in message
news:OcEHjyc7EHA.2124@.TK2MSFTNGP14.phx.gbl...
> Do not install anti-virus on a cluster host node EVER!
> Antivirus Software May Cause Problems with Cluster Services
> http://support.microsoft.com/default...b;en-us;250355
>
> --
> Geoff N. Hiten
> Microsoft SQL Server MVP
> Senior Database Administrator
> Careerbuilder.com
> I support the Professional Association for SQL Server
> www.sqlpass.org
> <Ray> wrote in message news:OPEfPga7EHA.1404@.TK2MSFTNGP11.phx.gbl...
>
|||Only problem I have actually experienced with anti-virus and SQL is with
tlog backups. We were storing emails in a database and the AV caught a
virus signature inside a transaction log backup file. BAD THINGS then
happened.
Geoff N. Hiten
Microsoft SQL Server MVP
Senior Database Administrator
Careerbuilder.com
I support the Professional Association for SQL Server
www.sqlpass.org
"Rodney R. Fournier [MVP]" <rod@.die.spam.die.nw-america.com> wrote in
message news:eXKBd%23c7EHA.3820@.TK2MSFTNGP11.phx.gbl...
> I have not had a problem with TrendMicro ServerProtect 5.58. Exclude lots
of[vbcol=seagreen]
> stuff, but it works great ;)
> Cheers,
> Rod
> MVP - Windows Server - Clustering
> http://www.nw-america.com - Clustering
> http://msmvps.com/clustering - Blog
> "Geoff N. Hiten" <SRDBA@.Careerbuilder.com> wrote in message
> news:OcEHjyc7EHA.2124@.TK2MSFTNGP14.phx.gbl...
cluster
>
|||I've read that article. But the corporate IT security often has more say in
whether to install the anti-virus software, though we can control what
files/directories to exclude from the scan. Often, that means all computers
must have anti-virus software installed and up to date. SQL boxes--clustered
or not--are no exception. It would be really bad for a DBA to wake up one
day finding that the SQL box is infected with a SQL Slammer like virus
because he told the management not to install any anti-virus software there.
Fortunately, we've not had any problem with running anti-virus on cluster
nodes so far.
Linchi
"Geoff N. Hiten" <SRDBA@.Careerbuilder.com> wrote in message
news:OcEHjyc7EHA.2124@.TK2MSFTNGP14.phx.gbl...
> Do not install anti-virus on a cluster host node EVER!
> Antivirus Software May Cause Problems with Cluster Services
> http://support.microsoft.com/default...b;en-us;250355
>
> --
> Geoff N. Hiten
> Microsoft SQL Server MVP
> Senior Database Administrator
> Careerbuilder.com
> I support the Professional Association for SQL Server
> www.sqlpass.org
> <Ray> wrote in message news:OPEfPga7EHA.1404@.TK2MSFTNGP11.phx.gbl...
>
|||"Linchi Shea" <linchi_shea@.NOSPAM.ml.com> wrote in message
news:OQBprUj7EHA.2180@.TK2MSFTNGP12.phx.gbl...
> I've read that article. But the corporate IT security often has more say
in
> whether to install the anti-virus software, though we can control what
> files/directories to exclude from the scan. Often, that means all
computers
> must have anti-virus software installed and up to date. SQL
boxes--clustered
> or not--are no exception. It would be really bad for a DBA to wake up one
> day finding that the SQL box is infected with a SQL Slammer like virus
> because he told the management not to install any anti-virus software
there.
Not in my opinion.
It would be really bad for the DBA to wake up one day finding that the SQL
box is infected with a SQL Slammer like virus because he didn't apply the
patches that had been available for months previous.
Note that AV software is almost always purely reactionary. It generally
needs a virus signature, which means the virus has to have been in the wild
previously.
In addition, I'm not sure any AV software would catch a virus like Slammer
that's memory resident and runs basically within the scope of an existing
application. (technically it was a worm in any case.)
So, in case you can't tell, I'm not a huge fan of AV software on SQL
Servers. :-
[vbcol=seagreen]
> Fortunately, we've not had any problem with running anti-virus on cluster
> nodes so far.
> Linchi
> "Geoff N. Hiten" <SRDBA@.Careerbuilder.com> wrote in message
> news:OcEHjyc7EHA.2124@.TK2MSFTNGP14.phx.gbl...
cluster
>
|||I have 'ownership' of the entire SQL boxes for our web site operations. I
also have significant influence on the internal operations group. No AV on
clusters and massive exclusions on SQL Servers is the rule around here. Of
course, all our servers are in heavily defended subnets that have to go
through firewalls to get to the outside world. Our network guys are pretty
good at protecting our systems.
Geoff N. Hiten
Microsoft SQL Server MVP
Senior Database Administrator
Careerbuilder.com
I support the Professional Association for SQL Server
www.sqlpass.org
"Linchi Shea" <linchi_shea@.NOSPAM.ml.com> wrote in message
news:OQBprUj7EHA.2180@.TK2MSFTNGP12.phx.gbl...
> I've read that article. But the corporate IT security often has more say
in
> whether to install the anti-virus software, though we can control what
> files/directories to exclude from the scan. Often, that means all
computers
> must have anti-virus software installed and up to date. SQL
boxes--clustered
> or not--are no exception. It would be really bad for a DBA to wake up one
> day finding that the SQL box is infected with a SQL Slammer like virus
> because he told the management not to install any anti-virus software
there.[vbcol=seagreen]
> Fortunately, we've not had any problem with running anti-virus on cluster
> nodes so far.
> Linchi
> "Geoff N. Hiten" <SRDBA@.Careerbuilder.com> wrote in message
> news:OcEHjyc7EHA.2124@.TK2MSFTNGP14.phx.gbl...
cluster
>

Anti Virus scanning and database files

Does Microsoft have an official position on excluding MDF/LDF files from
virus scanning? I searched the KBs but couldnt come up with anything.
Thanks.Neil W. wrote:
> Does Microsoft have an official position on excluding MDF/LDF files
> from virus scanning? I searched the KBs but couldnt come up with
> anything.
You can refer to this kb article
http://support.microsoft.com/kb/309422/en-us
Usually I exclude SQL Server data files from scanning...

> Thanks.
Bye
Luca Bianchi
Microsoft MVP - SQL Server
http://mvp.support.microsoft.com

Anti virus on a failover cluster

Are there any cluster aware anti virus products that dont cause problems
such as the ones outlined in KB250355
http://support.microsoft.com/default.aspx/kb/250355 ? I dont want to run
with no anti virus. Thanks
AV products use filter drivers that intercept traffic on the server. You do
not want this on a DBMS server because of the performance overhead
associated with it.
What you can do is use the scheduled file scanning tools that come with most
AV software, but you should disable any ACTIVE SCANNING functionality.
More importantly, DBMS systems should be highly protected by proper
perimeter defenses, VLAN ACLs, and IPSec policies. Short of the necessary
management functions, the only traffic should be the DBMS TCP/IP
communication.
As such, there should be no publicly available network shares. Any email
usage should be strictly outbound SMTP.
The server should be locked down from any Anonymous access.
Therefore, there should be little need for AV software at all on a properly
configured host. Periodic file level scans should be sufficient to properly
protect the system.
Sincerely,
Anthony Thomas
"Enghps1" <jamesserjeant@.blueyonder.co.uk> wrote in message
news:%23HXMOa%23CHHA.572@.TK2MSFTNGP03.phx.gbl...
> Are there any cluster aware anti virus products that dont cause problems
> such as the ones outlined in KB250355
> http://support.microsoft.com/default.aspx/kb/250355 ? I dont want to run
> with no anti virus. Thanks
>
|||Today every machine should have anti virus software, its foolish not to.
Just exclude the DB, logs, and MSCS directories from your scanner. If you
have MSDTC installed, exclude that folder too.
Rodney R. Fournier
MVP - Windows Server - Clustering
Internally Caffeinated MCT
Windows 2000/2003 MCSE: Security/Messaging
MCSA 2000/2003: Security/Messaging
MCSE + Internet (NT 4.0), MCSE 3.5
HP/Compaq AIS-ASE, CTT+, MSS, LCP
A+, Network+, Server+, i-Net+, Security+
And Great Guy
http://www.nw-america.com - Clustering Website
http://www.msmvps.com/clustering - Blog
http://www.clusterhelp.com - Cluster Training
ClusterHelp.com is a Microsoft Certified Gold Partner
"Enghps1" <jamesserjeant@.blueyonder.co.uk> wrote in message
news:%23HXMOa%23CHHA.572@.TK2MSFTNGP03.phx.gbl...
> Are there any cluster aware anti virus products that dont cause problems
> such as the ones outlined in KB250355
> http://support.microsoft.com/default.aspx/kb/250355 ? I dont want to run
> with no anti virus. Thanks
>