Announcement

Collapse
No announcement yet.

Server 2003 antivirus and Exchange

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Server 2003 antivirus and Exchange

    Hello,

    I am running McAfee GroupShield to protect the mail portion of our Exhange server. Should I also have an OS-level anti-virus product running? All of our users are remote and access email via OWA, so we have no immediate requirement for desktop protection, just for the servers.

    If practical, I'd like to use the same OS-level product on the AD server. But, I'm somewhat new at this so I'm not sure what's important for options.

    Thanks in advance...

  • #2
    Re: Server 2003 antivirus and Exchange

    not too sure about McAffee, never used it, but a normal enterprise antivirus is a complete solution that protects servers, services (like email) and desktops

    anyhow, using windows it is always a good idea to have an antivirus running
    ________
    Ford synus picture
    Last edited by DYasny; 6th March 2011, 17:58.
    Real stupidity always beats Artificial Intelligence (c) Terry Pratchett

    BA (BM), RHCE, MCSE, DCSE, Linux+, Network+

    Comment


    • #3
      Re: Server 2003 antivirus and Exchange

      You can run Groupshield and Mcafee Virusscan 8.5i on the same machine without problems.
      However, exclude the exchange databases and logfiles from scanning within Mcafee Virusscan 8.5i.
      Marcel
      Technical Consultant
      Netherlands
      http://www.phetios.com
      http://blog.nessus.nl

      MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
      "No matter how secure, there is always the human factor."

      "Enjoy life today, tomorrow may never come."
      "If you're going through hell, keep going. ~Winston Churchill"

      Comment


      • #4
        Re: Server 2003 antivirus and Exchange

        Yes, so here's a quick list of the default folders that should be excluded (this list is courtesy AVG/Grisoft who recommend these folders for exclusion by all resident AV products)

        C:\Program Files\Exchsrvr\Mailroot
        C:\Program Files\Exchsrvr\CONNDATA
        C:\Program Files\Exchsrvr\MDBDATA
        C:\Program Files\Exchsrvr\MTADATA
        C:\Program Files\Exchsrvr\SCHEMA
        Best wishes,
        PaulH.
        MCP:Server 2003; MCITP:Server 2008; MCTS: SBS2008

        Comment


        • #5
          Re: Server 2003 antivirus and Exchange

          Here are some articles from Microsoft.
          http://support.microsoft.com/kb/245822
          http://support.microsoft.com/kb/823166
          Marcel
          Technical Consultant
          Netherlands
          http://www.phetios.com
          http://blog.nessus.nl

          MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
          "No matter how secure, there is always the human factor."

          "Enjoy life today, tomorrow may never come."
          "If you're going through hell, keep going. ~Winston Churchill"

          Comment


          • #6
            Re: Server 2003 antivirus and Exchange

            Thanks for your assistance!

            Comment


            • #7
              Re: Server 2003 antivirus and Exchange

              you're welcome
              Marcel
              Technical Consultant
              Netherlands
              http://www.phetios.com
              http://blog.nessus.nl

              MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
              "No matter how secure, there is always the human factor."

              "Enjoy life today, tomorrow may never come."
              "If you're going through hell, keep going. ~Winston Churchill"

              Comment


              • #8
                Re: Server 2003 antivirus and Exchange

                In general, is McAfee a decent solution for server-level protection?

                Comment


                • #9
                  Re: Server 2003 antivirus and Exchange

                  To put the answer in another term, who makes better aircraft, Cessna or Piper (prefer a Mooney myself)? The better car, Porche or Ferrari?

                  This question has been discussed before and it is individual preference however if you want a personal insight, search the Coffee Lounge for a post by DanielP about Symantec A/V. Well worth the search and the read.
                  1 1 was a racehorse.
                  2 2 was 1 2.
                  1 1 1 1 race 1 day,
                  2 2 1 1 2

                  Comment


                  • #10
                    Re: Server 2003 antivirus and Exchange

                    i dont think youll ever reach a consensus on which AV is the best...

                    some will say symantec, some mcaffee....

                    personally, i am very happy with trendmicro right now. it uses very little resources and is a set-it-and-forget-it product. it doesnt bother the users with asking about updates, integrates with Cisco NAC, includes support for WM5-6/CE with a special agent, and is easy to manage from an admin point of view.

                    as stated above by Dumber, you can run Groupshield and Mcafee Virusscan 8.5i on the same machine.. so that may be your best bet. compatibility is very important when using multiple AV solutions, so you may be limited to what you can and cant use.

                    regardless of the engine you choose, the most important thing is to do as paulH said and verify that those directories he listed are being excluded from the viri scanning. you will notice a serious impact on performance (AND POSSIBLE DATA CORRUPTION! YUCK!) with your mail stores if you do not exclude them...

                    in addition, make sure that any other programs you are using on the server have no special requirements, like excluding certain directories, before continuing.
                    off the top pf my head, i can think of a few...
                    Exchange 5/2000/2003/2007
                    M$ SQL 2000/2005 (and previous versions i would imagine)
                    GFI MailArchiver
                    Oracle
                    Informix

                    ive also had some issues with print servers and AV scanning. planet press didnt like trend going thru its crap while it was trying to print receipts...

                    basically, things with a real-time dB or a streaming dB should be excluded, but check with the manufacturer before doing so. also, things like a streaming media server will suffer a performance impact if the AV software is scanning while your trying to stream media...

                    here is a KB about Exchange and AV software. take a skim thru it and make sure you have covered the points outlined in the document: <------ Dumber beat me to this article. sorry dumber.. wasnt paying attention. you won.
                    http://support.microsoft.com/default...;Q245822&ID=KB

                    hope that helps, and good luck!
                    Last edited by James Haynes; 31st December 2007, 03:08. Reason: cause im blind and dumber is smarter and quicker.
                    its easier to beg forgiveness than ask permission.
                    Give karma where karma is due...

                    Comment


                    • #11
                      Re: Server 2003 antivirus and Exchange

                      Not paying attention Mr Haynes, well then no more for you until next year. (10 hours & 10 minutes and counting, here of course)
                      1 1 was a racehorse.
                      2 2 was 1 2.
                      1 1 1 1 race 1 day,
                      2 2 1 1 2

                      Comment


                      • #12
                        Re: Server 2003 antivirus and Exchange


                        d00d! i swear.. we posted that at the same time, cause after i hit the 'submit' i saw your post.

                        i wasnt tryin to trump you post. i was just late on the draw...

                        my bad.

                        do i really type like im buzzed? heeheehe...

                        j
                        Last edited by James Haynes; 31st December 2007, 06:31.
                        its easier to beg forgiveness than ask permission.
                        Give karma where karma is due...

                        Comment


                        • #13
                          Re: Server 2003 antivirus and Exchange

                          Biggles and James
                          I beated James in more then one day

                          About mcafee;
                          Personally i really love mcafee as the AV solution.
                          I've seen many products and although Mcafee has a bad reputation (version 4.x) it's currently one of the best products i've seen. Although this is still a personal flavour.

                          Why do I like mcafee more then others:

                          I've seen that Mcafee is in general much faster with their updates then other leading products. Also ePolicy Orchestrator is still the finest management tool for an AV eviroment. Symantec can't beat it
                          I've seen enviroments where TREND MICRO InterScan Web Security Suite was used as a gateway scanner and Groupshield on exchange. Groupshield was configured to check for updates every 3 hours. Trend was sheduled to check for updates every 15 minutes. Every time when a big virus was released mcafee was the first who detected the virus and killed it. Some hours later Trend was updated and he took over the job of killing the virusses. An example of such virus was Netsky.P

                          However instead of Groupshield I'm also quit impressed of Antigen formely from Sybari:
                          http://www.microsoft.com/antigen/default.mspx
                          It uses multiple scan engines to scan you're email

                          My personal conclusion, stick with Mcafee unless you have found some other reasons to switch over. However, make sure you configure mcafee well and use ePO if possible.
                          Marcel
                          Technical Consultant
                          Netherlands
                          http://www.phetios.com
                          http://blog.nessus.nl

                          MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
                          "No matter how secure, there is always the human factor."

                          "Enjoy life today, tomorrow may never come."
                          "If you're going through hell, keep going. ~Winston Churchill"

                          Comment

                          Working...
                          X