Antivirus on a file server?

[pinkpanther56]

Hi all,

Im running several Windows 2003 file servers with Symantec corp 9. I\'m wondering how to configure the scanning, should i have full active scanning on the file servers?

I currently have Symantec Corp 9 on all of my clients so do i need active scanning on the servers all the time as well? I run a full AV scan on all servers every night.

Final question: When a client opens a file on the server is it scanned first by the server AV and then by the client or does the server AV only scan a file if it is opened on the server locally?

Thanks.

 

[darksasami]

You should definitely have real time scanning on the servers. You can set it to scan when Modified instead of Accessed Or Modified (under Advanced), though, so it doesn't scan as often.

And turn of Network scanning on all the clients. That hits the server harder than real time scanning on the server, because it means the clients actually download files from the server and scan them.

Final answer: if you set it to scan when Modified, the server will only scan the file when a client writes it, not when a client reads it. That way, both the client and the server do scan it (which you DO want, because there WILL be clients with broken antivirus somewhere down the road) but it doesn't scan four times every time the client opens a file.

Hanlon's Razor: Never attribute to malice that which is adequately explained by stupidity.