SQL Server and AntiVirus

Rick Martinez

585 pts.

Tags:

Antivirus

Microsoft Windows Server 2003

SQL Server

SQL Server 2008

SQL Server security

We have many sql server running on seperate boxes, the Network team wants to install antivirus software on all the sql servers. Is that a good idea? Why?

Software/Hardware used:
sql server 2008, windows server 2003

Asked: February 18, 2011 4:46 PM Last updated: March 2, 2011 11:28 PM

Answer Wiki

Last updated: February 19, 2011 5:54 AM GMT

Ingram871,285 pts.
History
Contributors
- Ordered by most recent
- Ingram871,285 pts.

Thanks. We'll let you know when a new response is added.

Every progam I’ve ever seen that uses SQL recommends that you exclude their program directories. But you should definitely install antivirus software on it. You’re SQL server is for sure one system you wouldn’t want to have infected with a network virus, so make sure you keep it protected.

Discuss This Question: 4 Replies

carlosdl Feb 18, 2011 5:26 PM GMT

I think it is a good idea as long as the directories where the datafiles reside are excluded from the scans. But I'm not a SQL Server expert...

84,495 pointsBadges:

report
jinteik Feb 19, 2011 4:37 PM GMT

for my side, I exclude the folders that holds the SQL data. if you are scanning the data and it is being accessed, there will be bound to problems to happen. one more thing you could do is to not allow it to take the maximum resources while scanning. this is what i implemented at my work place

18,995 pointsBadges:

report
IceCubbe Mar 1, 2011 1:58 PM GMT

Yes everyone is correct, 1. AV has to been installed for sure 2. Get all the directories that needs to be excluded from you sql admin 3. As Jinteik mentioned, also check that the AV is set so that it doesn't take up all the resources on your server.

1,385 pointsBadges:

report
Hlx Mar 2, 2011 11:28 PM GMT

You can also exclude .mdf, .ndf, and .ldf files as long as you haven't ever used non-standard file names. You will not want to have AV scan your db files in real-time as this will significantly hamper your db performance and if AV ever does catch something (real or not), it will veru likely corrupt your db in the process of trying to stop it from writing to disk or quarantine the file.

690 pointsBadges:

report