AntiVirus on Servers?
-
@jaredbusch said in AntiVirus on Servers?:
@scottalanmiller said in AntiVirus on Servers?:
@nashbrydges said in AntiVirus on Servers?:
@scottalanmiller said in AntiVirus on Servers?:
@bbigford said in AntiVirus on Servers?:
It comes down to security vs. convenience. Performance is something completely different and can be tuned/scheduled.
Do you leave your keys in your vehicles ignition? Do you leave your front door wide open? Do you write your personal identity numbers on your arm?
No? Use anti-virus.
Do you still use it if you have servers that are not accessed directly or accessing anything? What will the AV be scanning?
Are you referring to things like Nextcloud? If so, yes I do use AV. I've installed ClamAV and scheduled scans of the files that users upload. Yes the endpoints have their own AV/AM but I'm still scanning what's in Nextcloud. There's a slight performance hit, but one I'm willing to live with.
Nextcloud is a file server, so I'd use it there for sure.
Why? Because nextcloud itself does not ever execute the files.
In case things get put there, there is a chance to catch them without the clients having to catch them. Not real time AV, just scheduled.
-
@scottalanmiller said in AntiVirus on Servers?:
@nerdydad said in AntiVirus on Servers?:
@scottalanmiller said in AntiVirus on Servers?:
@bbigford said in AntiVirus on Servers?:
It comes down to security vs. convenience. Performance is something completely different and can be tuned/scheduled.
Do you leave your keys in your vehicles ignition? Do you leave your front door wide open? Do you write your personal identity numbers on your arm?
No? Use anti-virus.
Do you still use it if you have servers that are not accessed directly or accessing anything? What will the AV be scanning?
If the servers aren't "serving" anything out, then what would be the purpose of the servers?
AV only is for files, not other traffic. Which is nearly everything outside of the SMB. FIle sharing is a minor task percentage wise. Think about a database server, for example. Or a proxy, or a load balancer, or an XMPP server, or a PBX....
I was also thinking of any possibility that a malicious program made its way onto a server intended for something other than file services. I should clarify that I'm only talking about a Windows Server. Load balancers running FreeBSD, DB on bare metal, etc I wouldn't think about putting it on those. Haha honestly, my post was more in the facetious now that I've re-read it.
I lacked more specific information in my post though about server OS or deliverable. That's my bad.
