Security Basics mailing list archives
RE: Why NOT to disable Real Time Antivirus on Servers
From: "Corey Watts-Jones" <cwattsjones () rogers com>
Date: Thu, 3 Nov 2005 14:35:01 -0500
You should pray that it *doesn't* take them out of the information store. You have to set exclusions for the mdbdata dirs or your database could go corrupt. That's why Symantec Mail Security is a separate program entirely. Just something to be very careful of. (from personal experiences with a foolish client) -----Original Message----- From: edizzle56 () hotmail com [mailto:edizzle56 () hotmail com] Sent: Thursday, November 03, 2005 12:25 AM To: security-basics () securityfocus com Subject: Re: Why NOT to disable Real Time Antivirus on Servers Will the real-time anti-virus even be able to suck viruses out of the exchange information store after they've arrived via SMTP? That would be a key thing to find out.. If you're running a pure exchange server, without having any file shares, I'd advocate disabling the realtime anti-virus as well.. Unless you're actually running an email client or browsing the web from the exchange server.. If it's a server, clients aren't running code on it, does this "real-time" a/v provide some worm protection as well? That would be a valid argument if it defended against network-based attacks-- Verify CPU utilization though, run performance monitor on CPU utilization for a day with it disabled and a day with it enabled, is it really worth arguing about?
Current thread:
- RE: Why NOT to disable Real Time Antivirus on Servers, (continued)
- RE: Why NOT to disable Real Time Antivirus on Servers Mark Brunner (Nov 04)
- Re: Why NOT to disable Real Time Antivirus on Servers Abe Getchell (Nov 07)
- Re: Why NOT to disable Real Time Antivirus on Servers Thierry Zoller (Nov 03)
- Re: Why NOT to disable Real Time Antivirus on Servers Paul Wolstenholme (Nov 04)
- Re: Why NOT to disable Real Time Antivirus on Servers Micheal Espinola Jr (Nov 04)
- Re: Why NOT to disable Real Time Antivirus on Servers Brian Loe (Nov 03)
- Re: Why NOT to disable Real Time Antivirus on Servers RCS (Nov 03)
- Re: Why NOT to disable Real Time Antivirus on Servers Kenton Smith (Nov 03)
- Re: Why NOT to disable Real Time Antivirus on Servers tombrown (Nov 03)
- Re: Why NOT to disable Real Time Antivirus on Servers edizzle56 (Nov 03)
- RE: Why NOT to disable Real Time Antivirus on Servers Corey Watts-Jones (Nov 04)
- Re: Why NOT to disable Real Time Antivirus on Servers Micheal Espinola Jr (Nov 04)
- RE: Why NOT to disable Real Time Antivirus on Servers Anton Muthu Kumar B (InfoSec) - CTD, Chennai (Nov 03)
- RE: Why NOT to disable Real Time Antivirus on Servers Kirk Brady (Nov 03)
- RE: Why NOT to disable Real Time Antivirus on Servers Nick Duda (Nov 03)
- RE: Why NOT to disable Real Time Antivirus on Servers Steven Jones (Nov 03)
- Re: Why NOT to disable Real Time Antivirus on Servers THAVEEWAT VASAVAKUL (Nov 03)
- Re: Why NOT to disable Real Time Antivirus on Servers barcajax (Nov 03)
- RE: Why NOT to disable Real Time Antivirus on Servers Herbold, John W. (Nov 03)
- RE: Why NOT to disable Real Time Antivirus on Servers Steven Jones (Nov 04)
- Message not available
- RE: Why NOT to disable Real Time Antivirus on Servers Pranav Lal (Nov 07)
- Message not available