AntiVirus on Servers?
-
Windows server? Absolutely. Always good to have another layer of protection.
-
You should always have AV. Proper configuration is the key. You dont want to hurt performance. In most cases, vendors have what exclusions should be set as they deal with this all that.
-
Doing it after deployment is more tricky. You should probably reach out to the vendor first and see if there are any exclusions you need to make.
-
@irj said in AntiVirus on Servers?:
You should always have AV. Proper configuration is the key. You dont want to hurt performance. In most cases, vendors have what exclusions should be set as they deal with this all that.
I really like that Webroot has built in templates for creating profiles... their server profile was 95% of what we needed, just a couple of tweaks and it works a charm.
-
@rojoloco said in AntiVirus on Servers?:
@irj said in AntiVirus on Servers?:
You should always have AV. Proper configuration is the key. You dont want to hurt performance. In most cases, vendors have what exclusions should be set as they deal with this all that.
I really like that Webroot has built in templates for creating profiles... their server profile was 95% of what we needed, just a couple of tweaks and it works a charm.
I never got a chance to use their product at any of my employers
It has been my AV at home for awhile though
-
@irj said in AntiVirus on Servers?:
@rojoloco said in AntiVirus on Servers?:
@irj said in AntiVirus on Servers?:
You should always have AV. Proper configuration is the key. You dont want to hurt performance. In most cases, vendors have what exclusions should be set as they deal with this all that.
I really like that Webroot has built in templates for creating profiles... their server profile was 95% of what we needed, just a couple of tweaks and it works a charm.
I never got a chance to use their product at any of my employers
It has been my AV at home for awhile though
I've been 100% satisfied with their product and support. I use it at home too.
-
Windows Server 2016 comes Windows Defender Antivirus
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-antivirus/windows-defender-antivirus-on-windows-server-2016 -
@black3dynamite said in AntiVirus on Servers?:
Windows Server 2016 comes Windows Defender Antivirus
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-antivirus/windows-defender-antivirus-on-windows-server-2016We've done lab tests with Defender and without ATP, it isn't great. With ATP, it is really solid.
-
We are soon switching to Bitdefender for all of our Non-2016 servers. For our 2016 systems, we're just using the Windows Defender.
-
@black3dynamite said in AntiVirus on Servers?:
Windows Server 2016 comes Windows Defender Antivirus
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-antivirus/windows-defender-antivirus-on-windows-server-2016And then I install the real antivirus onto the server.
-
@nerdydad said in AntiVirus on Servers?:
@black3dynamite said in AntiVirus on Servers?:
Windows Server 2016 comes Windows Defender Antivirus
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-antivirus/windows-defender-antivirus-on-windows-server-2016And then I install the real antivirus onto the server.
Their ATP offering is really solid. Mainly because it isn't made by Microsoft
I forget who they bought it from, but our MS sales reps were telling us that they bought a complete product.
-
@nerdydad said in AntiVirus on Servers?:
@black3dynamite said in AntiVirus on Servers?:
Windows Server 2016 comes Windows Defender Antivirus
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-antivirus/windows-defender-antivirus-on-windows-server-2016And then I install the real antivirus onto the server.
But does Windows server allow you to install AV on the server with Defender ? feels like it this day an age it will penalize any 3rd party software.
-
@emad-r said in AntiVirus on Servers?:
@nerdydad said in AntiVirus on Servers?:
@black3dynamite said in AntiVirus on Servers?:
Windows Server 2016 comes Windows Defender Antivirus
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-antivirus/windows-defender-antivirus-on-windows-server-2016And then I install the real antivirus onto the server.
But does Windows server allow you to install AV on the server with Defender ? feels like it this day an age it will penalize any 3rd party software.
I know some AV programs clash, but I don't know about Windows Defender. It's all I'm using at home and a few of my servers (Server 2016) at work.
-
@scottalanmiller said in AntiVirus on Servers?:
Depends, if it is a Windows file server, I would generally like to have it. Other than that, I normally don't. We rarely run Windows on servers, so that generally solves the problem right there.
And in case of a Linux fileserver? I did that, not a big problem.
-
@thwr said in AntiVirus on Servers?:
@scottalanmiller said in AntiVirus on Servers?:
Depends, if it is a Windows file server, I would generally like to have it. Other than that, I normally don't. We rarely run Windows on servers, so that generally solves the problem right there.
And in case of a Linux fileserver? I did that, not a big problem.
ClamAV if you feel the need
-
@scottalanmiller said in AntiVirus on Servers?:
@thwr said in AntiVirus on Servers?:
@scottalanmiller said in AntiVirus on Servers?:
Depends, if it is a Windows file server, I would generally like to have it. Other than that, I normally don't. We rarely run Windows on servers, so that generally solves the problem right there.
And in case of a Linux fileserver? I did that, not a big problem.
ClamAV if you feel the need
Yeah, I know, but would you do it?
-
@thwr said in AntiVirus on Servers?:
@scottalanmiller said in AntiVirus on Servers?:
@thwr said in AntiVirus on Servers?:
@scottalanmiller said in AntiVirus on Servers?:
Depends, if it is a Windows file server, I would generally like to have it. Other than that, I normally don't. We rarely run Windows on servers, so that generally solves the problem right there.
And in case of a Linux fileserver? I did that, not a big problem.
ClamAV if you feel the need
Yeah, I know, but would you do it?
Not normally, the end points do it already.
-
@scottalanmiller said in AntiVirus on Servers?:
@thwr said in AntiVirus on Servers?:
@scottalanmiller said in AntiVirus on Servers?:
@thwr said in AntiVirus on Servers?:
@scottalanmiller said in AntiVirus on Servers?:
Depends, if it is a Windows file server, I would generally like to have it. Other than that, I normally don't. We rarely run Windows on servers, so that generally solves the problem right there.
And in case of a Linux fileserver? I did that, not a big problem.
ClamAV if you feel the need
Yeah, I know, but would you do it?
Not normally, the end points do it already.
But wouldn't that mean that you actually trust your endpoints?
/me takes cover
-
@thwr said in AntiVirus on Servers?:
@scottalanmiller said in AntiVirus on Servers?:
@thwr said in AntiVirus on Servers?:
@scottalanmiller said in AntiVirus on Servers?:
@thwr said in AntiVirus on Servers?:
@scottalanmiller said in AntiVirus on Servers?:
Depends, if it is a Windows file server, I would generally like to have it. Other than that, I normally don't. We rarely run Windows on servers, so that generally solves the problem right there.
And in case of a Linux fileserver? I did that, not a big problem.
ClamAV if you feel the need
Yeah, I know, but would you do it?
Not normally, the end points do it already.
But wouldn't that mean that you actually trust your endpoints?
/me takes cover
I don't trust anyone using legacy file serving
-
@thwr said in AntiVirus on Servers?:
@scottalanmiller said in AntiVirus on Servers?:
@thwr said in AntiVirus on Servers?:
@scottalanmiller said in AntiVirus on Servers?:
@thwr said in AntiVirus on Servers?:
@scottalanmiller said in AntiVirus on Servers?:
Depends, if it is a Windows file server, I would generally like to have it. Other than that, I normally don't. We rarely run Windows on servers, so that generally solves the problem right there.
And in case of a Linux fileserver? I did that, not a big problem.
ClamAV if you feel the need
Yeah, I know, but would you do it?
Not normally, the end points do it already.
But wouldn't that mean that you actually trust your endpoints?
/me takes cover
Or... maybe it is that I don't care, let the helpdesk deal with those issues
