|
Posted by Roger Abell [MVP] on May 26, 2006, 10:54 am
Please log in for more thread options You need to consider both what the server is used for, and how the
antimalware under consideration would be configured (on access,
on write, periodic full scan, etc.)
Consider: a DC that has not fileshare storage and that is managed with
best practices could only become sick due to an admin's actions or
an unhealthy admin workstation, or an unpatched flaw.
At the other extreme, a fileserver on which there are user shared areas
could serve to pass infectous files from one user machine to another if
they both access the shared store.
Finally, you should consider the overheads your intended config of the
antimalware vs the actual risks, and remember that some antimalware
does not play well with some OS files (like ntds.dit, FRS ans Sysvol,
SQL's db files, etc.)
> Is anti spyware software needed on my servers? Most spyware is installed
> along with the so called free software or from browsing the internet...
> Is
> it not best practice to avoid browsing the internet from your servers?
> Also
> shouldn't you be testing software in a test environment before installing
> in
> production environment. If these two things are done is anti spyware
> software really a threat on my server?
|