Virus scanning the iSeries IFS

Application security
Current threats
Disaster Recovery
human factors
Incident response
Instant Messaging
Intrusion management
Microsoft Exchange
Network security
PEN testing
Platform Security
Risk management
Secure Coding
Security Program Management
vulnerability management
Do you know of any products that will allow me to scan my IFS for viruses? If so, are you using the product(s) and are you satisfied with their performance? THANKS! for your help.

Answer Wiki

Thanks. We'll let you know when a new response is added.

There are a couple of ways to scan the IFS for Viruses. One is to use Trend Micro I think it more for Domino for iSeries though. The other is to use a PC or NT server with Norton’s or other flavor of antivirus. Map a drive to the IFS and scan the drive. This is the cheapest way, but not very fast.

At our shop we don’t scan the IFS for virus very often and use the second method I mentioned. Our reasons are, we already have Norton on each desktop and scan incoming email attachments too. The AS/400 is behind our DMZ. Only internal users can get access to the IFS. Having a third layer is overkill for us.

Hope this information helps.

Discuss This Question: 2  Replies

There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.
  • TomLiotta
    (Disclaimer -- I work for The PowerTech Group, Inc., an iSeries security vendor.) It's been a couple years since, but I've installed and tested two native AV solutions -- McAfee and Sophos. Both performed well enough and I have no major issues with them. I believe that Bytware's StandGuard AV is built around McAfee and it seems to do well at managing AV activity and integrating with day to day system use. (We wanted to understand the market/technology, but we didn't see sufficient ROI to pursue.) Other solutions can be made to work. I think a few have even managed to get ClamAV going. The value-add for a product such as StandGuard AV comes in the GUI control and the automation that's provided for downloading/installing updates plus the links through the OS/400 registration facility that allow automatic scanning of IFS files when opened, etc. You can go open-source if you wish. Anything that can be made to run under Linux on PowerPC or AIX can be made to run on iSeries; that includes McAfee, Sophos and possibly others. Or you can go with a product designed for OS/400; StandGuard AV is the only one I'm aware of. Technically, you can also go with any solution that can access shares across a Windows or a NFS network. This might be run from a cheaper Windows or Linux server or an integrated server card and would access only directories that have been shared. An obvious downside is that this would only cover basic scans and would not cover files as they are opened or written.
    125,585 pointsBadges:
  • Maverick64
    FYI, I work for a financial trading company and although the razlee was pitched by their president, I have recently heard good things about that product from a third party.
    0 pointsBadges:

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

Thanks! We'll email you when relevant content is added and updated.


Share this item with your network: