Are there any cluster aware anti virus products that dont cause problems
such as the ones outlined in KB250355
http://support.microsoft.com/default.aspx/kb/250355 ? I dont want to run
with no anti virus. Thanks
AV products use filter drivers that intercept traffic on the server. You do
not want this on a DBMS server because of the performance overhead
associated with it.
What you can do is use the scheduled file scanning tools that come with most
AV software, but you should disable any ACTIVE SCANNING functionality.
More importantly, DBMS systems should be highly protected by proper
perimeter defenses, VLAN ACLs, and IPSec policies. Short of the necessary
management functions, the only traffic should be the DBMS TCP/IP
communication.
As such, there should be no publicly available network shares. Any email
usage should be strictly outbound SMTP.
The server should be locked down from any Anonymous access.
Therefore, there should be little need for AV software at all on a properly
configured host. Periodic file level scans should be sufficient to properly
protect the system.
Sincerely,
Anthony Thomas
"Enghps1" <jamesserjeant@.blueyonder.co.uk> wrote in message
news:%23HXMOa%23CHHA.572@.TK2MSFTNGP03.phx.gbl...
> Are there any cluster aware anti virus products that dont cause problems
> such as the ones outlined in KB250355
> http://support.microsoft.com/default.aspx/kb/250355 ? I dont want to run
> with no anti virus. Thanks
>
|||Today every machine should have anti virus software, its foolish not to.
Just exclude the DB, logs, and MSCS directories from your scanner. If you
have MSDTC installed, exclude that folder too.
Rodney R. Fournier
MVP - Windows Server - Clustering
Internally Caffeinated MCT
Windows 2000/2003 MCSE: Security/Messaging
MCSA 2000/2003: Security/Messaging
MCSE + Internet (NT 4.0), MCSE 3.5
HP/Compaq AIS-ASE, CTT+, MSS, LCP
A+, Network+, Server+, i-Net+, Security+
And Great Guy
http://www.nw-america.com - Clustering Website
http://www.msmvps.com/clustering - Blog
http://www.clusterhelp.com - Cluster Training
ClusterHelp.com is a Microsoft Certified Gold Partner
"Enghps1" <jamesserjeant@.blueyonder.co.uk> wrote in message
news:%23HXMOa%23CHHA.572@.TK2MSFTNGP03.phx.gbl...
> Are there any cluster aware anti virus products that dont cause problems
> such as the ones outlined in KB250355
> http://support.microsoft.com/default.aspx/kb/250355 ? I dont want to run
> with no anti virus. Thanks
>
