Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Just bought a new windows 2008 server and i set there some of our websites, the windows firewall is running, should i install an antivirus? and which one you recommend?

share|improve this question

2 Answers 2

up vote 4 down vote accepted

The decision as to whether or not you need antivirus should be based on what the server is doing. If you're serving websites and there is any way users can get data onto the server - file uploads, forum attachments, email, then you should be scanning these for viruses.

Will you be browsing the internet on your server? Will it be hosting email? If so then you need to consider AV.

There are also some exceptions, are you running SQL? Then you need to exclude some areas of that. Will you be running Exchange? You'll need a proper Exchange add-in for your AV to scan that.

What you also perhaps need to consider is what you will lose by running AV. If speed is an issue and AV is slowing your server down then sure you should consider whether you can do away with it, but if it will run in the background not causing an issue and may just save you one day, maybe it's worth it anyway? The cost of today's AV solutions is pretty minimal, especially if it's just for one server.

My personal preference is for something lightweight, so things like Macafee and Norton are out. I have used NOD32 in the past and it has performed well as has AVG's server editions.

share|improve this answer
    
fine, and you recommend one? –  Amr ElGarhy May 4 '09 at 11:46
    
I've run AVG's without problems. –  Martín Marconcini May 4 '09 at 14:19

Yes preferably, and when it comes to brand - the best bet is something you're already comfortable with or use on your clients.

Get the server version (if there is a special server version, sometimes it's just a matter of using the client edition as long as it's just an application server with no special needs (like e-mail, database aso).

If you don't run an entire management suit, set it up to deal with threats in a cautions manner, reporting problems first so you can check it out and decide before it wipes your client's web site data files due to "suspected malware" detected or something ;)

share|improve this answer
    
Personally I recommend NOD32 due to its speed, easy management solution and sane price model - but that's just a personal preference. –  Oskar Duveborn May 4 '09 at 10:22

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.