Re: Why NOT to disable Real Time Antivirus on Servers

From: Brian Loe (knobdy_at_gmail.com)
Date: 11/02/05

  • Next message: brandon.steili_at_gmail.com: "Sender Spoofing via SMTP"
    Date: Wed, 2 Nov 2005 16:05:10 -0600
    To: "george.peek@gmx.net" <george.peek@gmx.net>
    
    

    No case studies but there are other steps you can take at the Exchange
    Server level , and before it, to limit the need of a real-time AV. You
    do take a pretty serious performance hit, in my experience.

    On 2 Nov 2005 17:34:12 -0000, george.peek@gmx.net <george.peek@gmx.net> wrote:
    > Greetings,
    >
    > An Engineer and I are having an argument about keeping Real Time Antivirus disabled on servers.
    >
    > His point is keeping Real Time Antivirus Enabled on servers such as the Exchange Server takes a huge performance hit on the server.
    >
    > My argument is that keeping real time antivirus software disabled defeats the purpose of PREVENTING a server from being infected in the first place. Once it is infected, it is all too late already. The antivirus software is enabled on the workstations.
    >
    > He argues that since all of the workstations have the antivirus enabled, then there is no way for the virus to get in.
    >
    > Mine argument that a virus can still get in through other means. I need examples and case studies to refer to.
    >
    > I would like to find different case studies or scenarios where the real time antivirus was disabled on the servers, enabled on the PCs, and the company still got infected. Also, would like to find solutions to enabling real time scan and stream lining it so it does not affect the Exchange Server as bad.
    >
    > Would someone point me in the right direction or post potential case studies.
    >
    > Please post or email me.
    >
    > George.peek@gmx.net
    >
    > Thank You
    >


  • Next message: brandon.steili_at_gmail.com: "Sender Spoofing via SMTP"

    Relevant Pages

    • Re: Exchange Disaster Recovery Server
      ... The backup server is setup also in the lab so I ... >>> The Microsoft Exchange Server computer is not available. ... >>> Microsoft Exchange Server Information Store ...
      (microsoft.public.exchange2000.admin)
    • Re: Information Store taking all available memory.
      ... There are cases where the virus software is scanning things it should not ... The aforementioned should be excluded in the virus software. ... Do Not Back Up or Scan Exchange 2000 Drive M ... Understanding Virus Scanning API 2.0 in Exchange 2000 Server ...
      (microsoft.public.exchange2000.information.store)
    • Exchange 2003 SP1 periodicaly losses connection to active directory for about 30 minutes
      ... We have active directory in two servers but the mail server fails to ... the promotion of the server to active directory the exchange was up. ... After a Domain Controller is promoted to a Global Catalog, ...
      (microsoft.public.exchange.connectivity)
    • Exchange 2003 SP1 periodicaly losses connection to active directory for about 30 minutes
      ... We have active directory in two servers but the mail server fails to ... the promotion of the server to active directory the exchange was up. ... After a Domain Controller is promoted to a Global Catalog, ...
      (microsoft.public.exchange.misc)
    • Re: LDAP Bind Unsuccessful
      ... We have a similar problem with Exchange 2003 and two DC servers 2003. ... After a Domain Controller is promoted to a Global Catalog, ... server that is designated to be a Global Catalog Server but did ...
      (microsoft.public.exchange2000.active.directory.integration)