We have basic server-side virus scanning in our datacenter, but it's expensive, uses a considerable amount of CPU cycles, and is annoying to maintain. I'm not looking for a sales-pitch on "better" AV software, I'm more looking for a pulse on the community to see what other people are doing in their data centers.
Here's a quick overview of our datacenters - Primarily a Windows shop, with a small number of web servers, and a ton of SQL Servers. Of the web servers, only a few are public-facing, and port restrictions are very tight - Port 80 and 443. None of the SQL Servers are public facing.
In terms of "internal" threats (users doing stupid things), we are very restrictive with permissions, so only a very small portion of the company can install anything server side. Everyone else uses websites or client-side tools to access the servers.
So in this sort of "protected" private datacenter scenario where 95% of the users access the servers from client tools, and there is little to no public exposure, is there a strong case for running A/V clients on all of our back-end servers or not?