RE: Should webservers, eg. IIS 6 have anti--virus installed on them?

From: Brady McClenon (BMcClenon_at_uamail.albany.edu)
Date: 07/21/05

  • Next message: Greg Kelley: "RE: Should servers have anti--virus installed on them?" 
    Date: Thu, 21 Jul 2005 10:17:40 -0400
To: "Harlan Carvey" <keydet89@yahoo.com>, "Steve Bostedor" <Steveb@tshore.com>, <focus-ms@securityfocus.com>

    Harlan,

    Throughout your posts, you insinuate that installing AV is used as a
    safety blanket. That sys admins will think they can be more lax on
    security because AV will be the hero. Are their people with that mind
    set? Yes, and it's a problem that needs to be fixed, but you can not
    condemn the use of AV based on that. That is a totally separate issue.
    I don't think anyone here is condoning that behavior. The theme here is
    that we all try to secure our servers as best as we possibly can, but we
    can admit we make mistakes, can overlook something, or can get bogged
    down and sometimes not be able to a stay a step ahead of the next threat
    (one week or less on vacation can do this to you). So if there is no
    detriment to install AV and it could save me if I any of the three
    things listed above happens, why would I not take that insurance? Yes,
    if something happens you better learn from it and take better
    precautions from then on, but at least there's no compromise to explain,
    or clean up.

    Also, if AV does save me from myself some day, don't think I'll be
    gloating about, or feel proud. Luck is nothing to be proud of. I'll be
    kicking myself for letting it get through that far to begin with, but my
    blood pressure will be a lot lower, as I figure out what happened and
    mope on down the hall to explain it to management.

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Greg Kelley: "RE: Should servers have anti--virus installed on them?"

    Relevant Pages

    • IT Security Administrator in Bend, OR
      ... workstations as well as physical security for I/T systems. ... manages network security software and hardware. ... Extensive experience with Windows 2000/2003 servers and Exchange ... Two years experience configuring, installing and implementing VMWare ...
      (comp.arch)
    • Re: Security Update for MS XML Core Services 4.0 Service Pack 2(KB
      ... Security Update installed on my PC on 4/17 (it was the day after I saw the ... But, after the Re-boot, Windows Update showed KB941833 as an Available ... You asked me to Post the name of the Security Software; ... keep installing and Updated to Vista Home Prem SP1 ...
      (microsoft.public.windowsupdate)
    • Re: Yet more Windows XP security patches
      ... Alias wrote: ... >> otherhand it may keep your computer up and running by not installing ... >>> A security issue has been identified in the Plug and Play service ... >>> your computer by installing this update from Microsoft. ...
      (microsoft.public.windowsxp.general)
    • Re: Yet more Windows XP security patches
      ... > Before installing these updates it is best to read just what they do,take ... >> nothing new actually...about a dozen security patches to install. ... >> your computer by installing this update from Microsoft. ... a security hole in the ...
      (microsoft.public.windowsxp.general)
    • Re: Security Update for MS XML Core Services 4.0 Service Pack 2(KB
      ... Internet Security PcCillin.....PcCllin runs a Security check once a week. ... Windows Automatic Updates and installing) This Updates shows as Sucessfully ... what is the installed security software? ... know if its a MSXML download.... ...
      (microsoft.public.windowsupdate)