We run AV on our servers for a couple of reasons.

1)  AV does tend to update to block new IIS, SQL, etc. virii before MS
gets the affected software patched.  From experience, I'm gonna give it
about a 50% rating on that.
2)  It can give some limited protection to our webmail users.
3)  It can give some limited protection to our clients who distribute
files via FTP.

Any time that we find that the server had infected files, we run a full
sweep during off-peak hours.  Sometimes we do it just for fun.

But YMMV.

--Ben

Mike Chabot wrote:
> I am wondering people's thoughts on the idea of having anti-virus
> software running on a ColdFusion server?
>
> My opinion is that this is not a good idea. Other experienced server
> admins have told me that Norton AV slows down the performance of a Web
> server to an unacceptable degree. In my estimation, AV software does not
> do a great job of protecting Web servers, since Web servers are not
> running E-mail clients and that is how most viruses seem to be spread
> these days. I do not believe AV software will protect against worms
> attacking newly discovered security holes in Windows, IIS, or SQL Server.
>
> My recommendation is that, instead of real-time virus protection,
> servers be periodically scanned during off-peak hours, possibly using a
> different machine on the same network. Does anyone disagree with this?
>
> Virus software has been running on many of the servers in my area for
> years, and the logs indicate that no servers have ever been infected,
> even though many viruses have spread through our desktop machines.
>
> -Mike Chabot
>
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings] [Donations and Support]

Reply via email to