Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 702
  • Last Modified:

DFS Replication and SAV 10.0

We are looking to setup DFS Replication (the new 2003R2 version of it) and I found this quote on Microsoft's web page:

"Antivirus software must be compatible with DFS Replication; contact your antivirus software vendor to check for compatibility."

We run SAV 10.0 on our file servers.  Are there any issues or things we need to be aware of with this configuration?
0
etude
Asked:
etude
  • 4
  • 4
  • 2
  • +1
1 Solution
 
LazarusCommented:
I run SAV 10 on my servers with alot of DFS and have found no problems at all. I have seen no issues nor read of any issues either.
0
 
Netman66Commented:
Just make sure to exclude the DFS share from Realtime scanning - it may lock files open and cause replication issues (if you're using replicas).


0
 
bilbusCommented:
also uncheck the network box under real time protection
0
Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

 
etudeAuthor Commented:
What do you mean by exclude the DFS share; are you talking about the DFS Root or the actual shared files.  We will basically be replicating our entire file server and I don't really want to exclude realtime scanning on everything.
0
 
LazarusCommented:
There are few problems with AntiVirus programs with DFS other than over replication:

"Antivirus programs may modify security descriptors and cause excessive replication of FRS data in SYSVOL and DFS"
http://support.microsoft.com/kb/284947/EN-US/

I would not uncheck Real Time Protection ever.. My Opinion... But if you have a problem ever with over replication, just exclude the directory that is in question.
0
 
etudeAuthor Commented:
Most of this information seems to apply to the old FRS replication system.  Does anyone know to what extent the new DFS Replication found in 2003R2 corrects these problems?
0
 
Netman66Commented:
As I said earlier, if you don't exclude your DFS shares from Realtime scanning you're going to have replication issues - every time something touches those files (including FRS) they're scanned.  This causes tremendous overhead on the server and can (and usually does) cause FRS to start staging files endlessly because it cannot get a lock on them.

I never mentioned turning off Realtime scanning altogether - not a wise move.  Just exclude your DFS shares.  They will get scanned during a normal schedule.

0
 
LazarusCommented:
Netmann66's advise is DEAD-ON. That fits into what the links I posted say, and is a good practice. The fact that you are using R2 will have no effect. R2 has a reworked DFS that running with less overhead and is far better, but the same still holds true with the way the AV is going to work with it.
0
 
bilbusCommented:
enable the real time protection on the local file server, it will only scan its local copy. then a change is replicated it will scan it like any other file change. Uncheck network box so it only scans the local server, do ths on the server and the clients.

As long as the local server has SAV and real time on, there is never a nead to scan network
0
 
etudeAuthor Commented:
"Just exclude your DFS shares."

That is what I'm not understanding.  All the data on my file server is being replicated and shared via DFS (using multiple targets, no data in the actual DFS root).  Isn't that what you are talking about when you say DFS shares?  Or where you just talking about just excluding the DFS Root folders?

I'm sorry if it seems I keep asking the same question; I just want to make sure I fully understand the answer.
0
 
LazarusCommented:
Exclude all Shares belonging to the DFS Shares.
0
 
etudeAuthor Commented:
That takes me back to what I was saying before.  All of the data on this file server is being replicated by DFS; so your saying that I should exclude everything???

From what I have seen in my testing SAV 10 does not cause replication problems, so I'm just going to keep it real-time scanning the data and watch for problems.
0

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

  • 4
  • 4
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now