Norton Antivirus

[Former Member]

Dear All SAP Gurrus

I need help to decide about Antivirus on my windows server where the sap installed do we have performance issues after deploy Antivirus on machine on OS level if yes please let me know some Pros and Cons. if there is no performance issues then what is the best practicse ?

Regards

Arshad

[former_member204746]

even if the file in protected by a firewall, it still needs an anti-virus... the source could be yourself trying to access to this server... but, for performance reasons, you could decide to de-active the "on access" virus scanning and run a daily scan when the system is more quiet.

[markus_doehr2]

Every AV solution (whatever kind) hooks up to the I/O layer of the OS. You can, of course, exclude certain executables from being scanned.

The tests we performed some time ago showed a performance impact of 15 - 20 % with an installed AV (TrendMicro) compared to a "naked" system.

Here on the forum are a couple of posts when people had "strange" troubles when patching systems and/or databases since the application wanted to open/close/delete files that were locked by the AV and thus producing errors. Not without reason most software vendors recommend to stop the AV when you install/patch/update software.

I personally would never install an AV solution on a database server, I would put a firewall in front of the system and strictly define, who can access the system on the "critical ports". However, this is just my personal opinion.

Markus

[Former Member]

 I personally would never install an AV solution on a database server 

I couln´t agree more with you. I also prefer the firewall option or a VPN conection to DB server than using AV on a DB server, it is just so problematic to have it installed. If a "secure" conection to DB server is configured posibilities of getting "hit" are low enough. Most people don't realize that instead of AV software the best is to have an strict passwords and ports politics so hits won´t be so easy to achieve.

And remember this, 75% of attacks come from the inside LAN so take care of it first (AV and restrictions to all PC´s).

That's my opinion,