kid of real-time scanning. Most of our servers are scanned nightly or
weekly during off-peak usage. This is part of a larger security policy
that protects the servers as well - no one may use a server as a "semi
workstation" and do any web browsing from it, for example. (in
addition to firewalls, IDS, etc)
What does everyone else think?
Matt
----- Original Message -----
From: Mike Chabot <[EMAIL PROTECTED]>
Date: Wed, 21 Jul 2004 10:01:39 -0400
Subject: Anti-Virus Software on a Server
To: CF-Talk <[EMAIL PROTECTED]>
I am wondering people's thoughts on the idea of having anti-virus
software running on a ColdFusion server?
My opinion is that this is not a good idea. Other experienced server
admins have told me that Norton AV slows down the performance of a Web
server to an unacceptable degree. In my estimation, AV software does
not do a great job of protecting Web servers, since Web servers are
not running E-mail clients and that is how most viruses seem to be
spread these days. I do not believe AV software will protect against
worms attacking newly discovered security holes in Windows, IIS, or
SQL Server.
My recommendation is that, instead of real-time virus protection,
servers be periodically scanned during off-peak hours, possibly using
a different machine on the same network. Does anyone disagree with
this?
Virus software has been running on many of the servers in my area for
years, and the logs indicate that no servers have ever been infected,
even though many viruses have spread through our desktop machines.
-Mike Chabot________________________________
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings] [Donations and Support]
