I would invest the time in making the case that AV software on a Solaris box is a waste of time and money.
If they were really serious about security, they'd be much better off installing host based IDS.
Main Topics
Browse All TopicsWe've just installed an environment consisting of several Sun servers running Solaris 10. The boxes will be used as a portal for a business intelligence reporting environment. The servers are being configured as a dedicated web server, dedicated application server, dedicated data base server, and a dedicated backup server.
Our customer requires anti-virus software for all servers, but our customer is a Windows shop, so they require antivirus software on all their Windows boxes. We have never installed anti-virus software on Solaris boxes in this type of environment because all available products on the market seem to apply only to environments that scan or host mail servers (not done by these servers), function as an x86 file server (these boxes don't), or boxes that serve as a gateway/proxy server for general web access (also not done by these boxes).
The environment sits behind the customer's firewalls and will be used strictly by users behind the firewall. Yet, the customer wants anti-virus software. Other than wasting their money on 'feel good' software that really doesn't provide any real benefit, I don't see what other option is available.
Can anyone recommend an anti-virus product that will be of any use in this environment? Or do I just make the case using the type of info above that AV software isn't required or available?
TIA
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
I would have to agree with Tintin. I have been working on UNIX systems since 1984, AT&T, Radio Shack then HP-UX and Solaris and BSD derivatives, on to Linuz and, in over twenty years, I have never even seen an infected system. The majority of threats written nowadays are made by script kiddies and individuals trying to steal infomation from your web browser about buying habits and purchases. Still, a system that cannot be accessed by outisde users is still not 100% safe. The biggest threat to a UNIX system is internal users either stealing data or setting up timebombs that will destroy the system if, or after, after they have been terminated. Your best bet for a UNIX system is a reliable backup solution and disaster recovery plan. That, along with a good firewall and, if possible, a quality Intrusion Detection System (again, the IDS Tintin mentioned) covers all the bases. I like the Network General IDS systems. Not suprisingly, they are UNIX based.
Solaris is a Virus FREE OS, the virus for M$ can't run on Solaris. But you do need to worry about computer security (hackers).
Please read this Solaris 10 security How To Guide:
http://www.sun.com/softwar
and
http:Q_21500053.html
You can install somekind of anti-virus for scanning the mail boxes so you can get rid of the virus
before the email get in your your user's desktop PCs.
eg:
http://www.rav.ro/pages/sh
http://www.ravantivirus.co
http://www.symantec.com/re
Another suggestion would be to look into ClamAV (http://www.clamav.org), which should compile and run on your Sun boxes, and do whatever you really need it to do (like scan specific folders, stream-scan mails, scan entire volumes, etc.). It is free, and well maintained.
Whether it is of any use in your environment ... Well ... As previously mentioned, most viruses target Win32. Scanning things that Windows-machines have direct access to can provide an added layer of security (i.e. 2 different scanning engines instead of one), but it won't really increase the security of the servers in question themselves.
err http://www.clamav.net, sorry about that.
Business Accounts
Answer for Membership
by: PowerITPosted on 2006-08-23 at 09:23:53ID: 17373878
F-prot has an antivirus for Solaris, not only for email servers but also for file and application servers. This is probably what they are looking for: scanning all file access, as they are used to this in Windows. ucts/corpo rate_users /solaris/
http://www.f-prot.com/prod
But IMHO they are indeed wasting money and you should just make the case that AV is not required, if they have all other possible entry points covered.
We have a similar setup - altough on AIX en Linux - and have all Windows servers and clients covered by AV and also have an AV running on the gateway.
So if they don't have AV on the gateway, it would make more sense to invest it there.
J.