Re: Anti-Virus on web facing servers??

[flurdoing <flur () flurnet org>]

They should, without a doubt, be running AV software. Modern viruses and
worms authors are always finding new ways to propagate their malware.
You never know what services will be vulnerable to the next attack and
thus there is no real reason why not to run antivirus software and *KEEP
IT UPDATED*. Your updated anti-virus scanner can operate as a simple
form of intrusion detection, alerting you of malicious code that has
found its way onto your servers...

The only real loss apart from the financial cost of the application is
an overhead due to the AV scanners' memory resident nature. This is a
small price to pay for the *added* piece of mind.

Do not be fooled into thinking an AV scanner is enough to keep you
secure, but it certainly is another important utility which all
administrators should take advantage of.

flur.

On Fri, 2004-07-09 at 10:32, Dan Tesch wrote:
> Hello, I just started with a company that has three
> web facing W2K servers running IIS & SQL.
>
> My question; they are patched and behind a firewall
> but have no Anti-Virus running - can I get some feedback
> on whether these boxes should be running AV??
>
> They are on a network at a COLO just by themselves
> ie: no desktops but get FTP uploads regularly for
> content.
>
> Thanks
>
> ---------------------------------------------------------------------------
> Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
> any course! All of our class sizes are guaranteed to be 10 students or less 
> to facilitate one-on-one interaction with one of our expert instructors. 
> Attend a course taught by an expert instructor with years of in-the-field 
> pen testing experience in our state of the art hacking lab. Master the skills 
> of an Ethical Hacker to better assess the security of your organization. 
> Visit us at: 
> http://www.infosecinstitute.com/courses/ethical_hacking_training.html
> ----------------------------------------------------------------------------


---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
any course! All of our class sizes are guaranteed to be 10 students or less 
to facilitate one-on-one interaction with one of our expert instructors. 
Attend a course taught by an expert instructor with years of in-the-field 
pen testing experience in our state of the art hacking lab. Master the skills 
of an Ethical Hacker to better assess the security of your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------