R: Should webservers, eg. IIS 6 have anti--virus installed on them?

From: Sebastian Zdrojewski (sebastian.zdrojewski_at_technomind.it)
Date: 07/20/05

  • Next message: Brady McClenon: "RE: Should webservers, eg. IIS 6 have anti--virus installed on them?" 
    Date: Wed, 20 Jul 2005 09:06:08 +0200
To: <focus-ms@securityfocus.com>

    I would consider installing AV software on any server of a network. I do this way. The CPU usage of the software does not kill the CPUs, so I don't see a reason why NOT using an AV software.
     
    I would consider using it even of WSUS server, an Intranet server, a web printing server, whatever server it is (even an audit one!!)... truly I think neither the license cost nor the CPU usage represents a reason to keep you from installing the software on the server.
     
    IMHO :)
     
    Cheers
     
    Sebastian Konstanty Zdrojewski
    Senior Network & System Administrator
    Tel. +39 02 62.610.317
    Mobile +39 348.6079.096
    e-mail: sebastian.zdrojewski@technomind.it
     
    TECHNOMIND S.p.A.
    Via G.Galilei, 7 - 20124 Milano
    Tel. +39 02 62.610.300 - Fax. +39 02 62.610.333
    web: http://www.technomind.it

    ________________________________________
    Da: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] [mailto:sbradcpa@pacbell.net]
    Inviato: mar 19/07/2005 18.17
    A: Depp, Dennis M.
    Cc: Jeff; focus-ms@securityfocus.com
    Oggetto: Re: Should webservers, eg. IIS 6 have anti--virus installed on them?
    Okay..... so then

    no OWA
    no WSUS
    no Sharepoint

    We do get to do file and printing on this server or is that banned as
    well?  Define 'web server' folks because these days we 'are' running
    IIS/web servers in our domains because [at least in the case of WSUS]
    it's actually helping us reduce risk and not increase it.

    Depp, Dennis M. wrote:

    >Jeff,
    >
    >Interesting comments.  Especially about not having IIS in a domain. 
    >
    >Gill,
    >
    >To me the issue of virus protection depends on how you get content
    >installed on a machine and what type of content is on the machine If you
    >have a lot of users loading documents to your web servers, you might
    >want to consider adding virus protection to the servers.  Of course you
    >should also have virus protection on the desktops as well.  I would not
    >configure on access virus scanning, but instead would have scheduled
    >scanning.
    >
    >Dennis
    >
    ------------------------------------------------------

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Brady McClenon: "RE: Should webservers, eg. IIS 6 have anti--virus installed on them?"

    Relevant Pages

    • RE: Cant connect in to server!
      ... Cant access remote web workplace from outside server, ... Installing RRAS returned OK ... > address 3389 on the command line and paste the results to the newsgroup. ... > Microsoft CSS Online Newsgroup Support ...
      (microsoft.public.windows.server.sbs)
    • ANNOUNCE: UnixODBC 0.31
      ... UnixODBC provides a toolkit for writing Perl ODBC clients. ... - Installing and Configuring the Bridge Server ... UnixODBC.pm provides Perl programs with a subset of the X/Open ... Bridge Server," below. ...
      (comp.lang.perl.modules)
    • Re: IPSEC question
      ... The important issue is to get the server working properly first without ... I hit the SBS weblog and tried their stuff. ... Microsoft network client: Digitally sign communications: ... 898060 Installing security update MS05-019 or Windows Server 2003 Service ...
      (microsoft.public.windows.server.sbs)
    • Re: VPN disconnection
      ... installing the hotfixes, there will be some problems with VPN. ... Therefore if you installed SP2 on the server, ... Acceleration (ISA) Server 2006 or ISA Server 2004 ... 'Microsoft Firewall' service. ...
      (microsoft.public.windows.server.sbs)
    • Re: sql 2005 ctp install didnt go so well
      ... Mike Epprecht, Microsoft SQL Server MVP ... > Installing: sqlsupport on target: SERVER ...
      (microsoft.public.sqlserver.setup)