wissel.net

« How to explain "What is Server Virtualization" | Main| When customer service sucks - Star Alliance »

Domino Servers and Anti-Virus

You have build your High performance Domino Server but it doesn't perform. Besides running a proper OS, you need to ensure the right anti-virus configuration. All big Anti-virus vendors have plug-ins that intercept documents before they saved into a database and checked for integrity. So you are save (as far as you can say that). However when using the scanners default configuration the NSF are scanned again when you want to access them. And this is a bad idea. Pointless and an I/O killer. So go check: Does the Virus On-Access-Scanner leave your Notes databases alone (*.NSF/*.NTF in the notes data directory)? Excluding the various tmp locations and the transaction log is also a good idea. Works wonders on performance.

Posted by Stephan H Wissel On 24/04/2009, Category Show-N-Tell Thursday SYWTBADD | Permalink | Share

Comments

1 - Sorry, but this is not necessarily pointless. Virus definitions are updated constantly. A file can pass the initial scan, yet still contain an undetected virus. One could argue that the proper place to catch this is with desktop anti-virus software, but then why are you scanning on the server in the first place? (Answer: because desktop anti-virus is more likely to be compromised.)

Posted by Richard Schwartz At 00:52:04 On 04/25/2009 | - Website - |

2 - @Richard. I agree that a server side virus scan is necessary. But it should be done on a document basis not on a 'when Domino accesses the nsf' basis. This is what all these plug-ins into the virus scanners are for. They need to stay switched on. What I recommend is to switch off the scan-if-a-file-on-the-server-os is accessed.
stw

Posted by Stephan H. Wissel At 14:13:33 On 04/27/2009 | - Website - |

Post A Comment

Please note: Comments without a valid and working eMail address will be removed. This is my site, so I decide what stays here and what goes.

Name

Email

Website

Remember Me

Comments UBB Code Allowed

Comment Preview

Disclaimer

This site is in no way affiliated, endorsed, sanctioned, supported, nor enlightened by Lotus Software nor IBM Corporation. I may be an employee, but the opinions, theories, facts, etc. presented here are my own and are in now way given in any official capacity. In short, these are my words and this is my site, not IBM's - and don't even begin to think otherwise. (Disclaimer shamelessly plugged from Rocky Oliver)
© 2003 - 2012 Stephan H. Wissel - all rights reserved as listed here:
Unless otherwise labeled by its originating author, the content found on this site is made available under the terms of an Attribution/NonCommercial/ShareAlike Creative Commons License, with the exception that no rights are granted -- since they are not mine to grant -- in any logo, graphic design, trademarks or trade names of any type.