Over last year we have tried to deploy antivirus software on production linux servers. In most cases after a few weeks under month end loads applications start running slow, or do not work as it should.
I have always questioned to reason for having antivirus on linux, but it just seems a be must have item on auditors list. It is my understanding that the amount of linux malware is little in comparison to windows, which brings me to my question why linux servers are required to have anti virus in terms of SOX?
We have tried 2 different anti virus products and both deployments where rolled back on critical servers. Should we just put a compensating factor in place and forget about anti virus on linux altogether