Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Focus-Microsoft
[Top] [All Lists]

R: Should webservers, eg. IIS 6 have anti--virus installed on them?

Subject: R: Should webservers, eg. IIS 6 have anti--virus installed on them?
Date: Wed, 20 Jul 2005 09:06:08 +0200
I would consider installing AV software on any server of a network. I do this 
way. The CPU usage of the software does not kill the CPUs, so I don't see a 
reason why NOT using an AV software.
 
I would consider using it even of WSUS server, an Intranet server, a web 
printing server, whatever server it is (even an audit one!!)... truly I think 
neither the license cost nor the CPU usage represents a reason to keep you from 
installing the software on the server.
 
IMHO :)
 
Cheers
 
Sebastian Konstanty Zdrojewski
Senior Network & System Administrator
Tel. +39 02 62.610.317
Mobile +39 348.6079.096
e-mail: sebastian.zdrojewski@technomind.it
 
TECHNOMIND S.p.A.
Via G.Galilei, 7 - 20124 Milano
Tel. +39 02 62.610.300 - Fax. +39 02 62.610.333
web: http://www.technomind.it

________________________________________
Da: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] [mailto:sbradcpa@pacbell.net]
Inviato: mar 19/07/2005 18.17
A: Depp, Dennis M.
Cc: Jeff; focus-ms@securityfocus.com
Oggetto: Re: Should webservers, eg. IIS 6 have anti--virus installed on them?
Okay..... so then

no OWA
no WSUS
no Sharepoint

We do get to do file and printing on this server or is that banned as
well?  Define 'web server' folks because these days we 'are' running
IIS/web servers in our domains because [at least in the case of WSUS]
it's actually helping us reduce risk and not increase it.



Depp, Dennis M. wrote:

Jeff,

Interesting comments.  Especially about not having IIS in a domain. 

Gill,

To me the issue of virus protection depends on how you get content
installed on a machine and what type of content is on the machine If you
have a lot of users loading documents to your web servers, you might
want to consider adding virus protection to the servers.  Of course you
should also have virus protection on the desktops as well.  I would not
configure on access virus scanning, but instead would have scheduled
scanning.

Dennis

------------------------------------------------------

---------------------------------------------------------------------------
---------------------------------------------------------------------------


<Prev in Thread] Current Thread [Next in Thread>