Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
Home
Discussion Groups
DB Engine
SQL ServerMSDESQL Server CE
Services
Analysis (Data Mining)Analysis (OLAP)DTSIntegration ServicesNotification ServicesReporting Services
Programming
CLRConnectivitySQLXML
Other Technologies
ClusteringEnglish QueryFull-Text SearchReplicationService Broker
General
Data WarehousingPerformanceSecuritySetupSQL Server ToolsOther SQL Server Topics
DirectoryUser Groups
Related Topics
MS AccessOther DB ProductsMS Server Products.NET DevelopmentVB DevelopmentJava DevelopmentMore Topics ...

SQL Server Forum / Other Technologies / Clustering / June 2006

Tip: Looking for answers? Try searching our database.

How do you configure Symantec AntiVirus on a Microsoft SQL Server that is in a two-node cluster?

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Spin - 24 Jun 2006 19:47 GMT
Gurus,

How do you all configure Symantec AntiVirus on a Microsoft SQL Server that
is in a two-node cluster?  Do you install the antivirus on both physical
nodes and exclude the MDF and LDF files from real-time scanning?  And that's
it?

Signature

Spin

Geoff N. Hiten - 24 Jun 2006 21:04 GMT
You do not install Anti-virus at all on a clustered installation.  The AV
drivers tend to work poorly with the clustered disk resource drivers,
sometimes preventing a resource failover.

Signature

Geoff N. Hiten
Senior Database Administrator
Microsoft SQL Server MVP

> Gurus,
>
> How do you all configure Symantec AntiVirus on a Microsoft SQL Server that
> is in a two-node cluster?  Do you install the antivirus on both physical
> nodes and exclude the MDF and LDF files from real-time scanning?  And
> that's it?
Hank Arnold - 25 Jun 2006 10:27 GMT
What, then do you do for AV protection?? It's insanity to have a server
running w/o AV protection....

Regards,
Hank Arnold

> You do not install Anti-virus at all on a clustered installation.  The AV
> drivers tend to work poorly with the clustered disk resource drivers,
> sometimes preventing a resource failover.
Linchi Shea - 26 Jun 2006 02:34 GMT
As Geoff said, AV drivers have a real potential of causing nasty problems
that may be difficult to reproduce. However, in an enterprise, corporate
security often trumps any DBA concerns, and completely getting rid of running
AV is not a possibility. We end up exlcuding any mdf, ndf, ldf, bak, and trn
files.

Linchi

> What, then do you do for AV protection?? It's insanity to have a server
> running w/o AV protection....
[quoted text clipped - 5 lines]
> > drivers tend to work poorly with the clustered disk resource drivers,
> > sometimes preventing a resource failover.
Spin - 26 Jun 2006 04:24 GMT
Why .bak and .trn and files?

Signature

Spin

> As Geoff said, AV drivers have a real potential of causing nasty problems
> that may be difficult to reproduce. However, in an enterprise, corporate
[quoted text clipped - 16 lines]
>> > drivers tend to work poorly with the clustered disk resource drivers,
>> > sometimes preventing a resource failover.
Linchi Shea - 26 Jun 2006 05:28 GMT
Typically, these are SQL backup files in our environment. You can of course
backup databases/logs to files of any file extensions you may choose. Virus
scanning these files can cause the backup jobs to fail when the SQL instance
tries to backup to a file that is being virus scanned, thus can't get hold of
the file.

Linchi

> Why .bak and .trn and files?
>
[quoted text clipped - 18 lines]
> >> > drivers tend to work poorly with the clustered disk resource drivers,
> >> > sometimes preventing a resource failover.
Rodney R. Fournier [MVP] - 26 Jun 2006 15:57 GMT
We use it, exclude the MSCS directory and any data/DB directories.

Cheers,

Rodney R. Fournier

MVP - Windows Server - Clustering
http://www.nw-america.com - Clustering Website
http://msmvps.com/clustering - Blog
http://www.clusterhelp.com - Cluster Training
ClusterHelp.com is a Microsoft Certified Gold Partner

> Gurus,
>
> How do you all configure Symantec AntiVirus on a Microsoft SQL Server that
> is in a two-node cluster?  Do you install the antivirus on both physical
> nodes and exclude the MDF and LDF files from real-time scanning?  And
> that's it?
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2009 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.