DFS Replication and SAV 10.0
We are looking to setup DFS Replication (the new 2003R2 version of it) and I found this quote on Microsoft's web page:
"Antivirus software must be compatible with DFS Replication; contact your antivirus software vendor to check for compatibility."
We run SAV 10.0 on our file servers. Are there any issues or things we need to be aware of with this configuration?
"Antivirus software must be compatible with DFS Replication; contact your antivirus software vendor to check for compatibility."
We run SAV 10.0 on our file servers. Are there any issues or things we need to be aware of with this configuration?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Netman66
Just make sure to exclude the DFS share from Realtime scanning - it may lock files open and cause replication issues (if you're using replicas).
also uncheck the network box under real time protection
ASKER
What do you mean by exclude the DFS share; are you talking about the DFS Root or the actual shared files. We will basically be replicating our entire file server and I don't really want to exclude realtime scanning on everything.
There are few problems with AntiVirus programs with DFS other than over replication:
"Antivirus programs may modify security descriptors and cause excessive replication of FRS data in SYSVOL and DFS"
http://support.microsoft.com/kb/284947/EN-US/
I would not uncheck Real Time Protection ever.. My Opinion... But if you have a problem ever with over replication, just exclude the directory that is in question.
"Antivirus programs may modify security descriptors and cause excessive replication of FRS data in SYSVOL and DFS"
http://support.microsoft.com/kb/284947/EN-US/
I would not uncheck Real Time Protection ever.. My Opinion... But if you have a problem ever with over replication, just exclude the directory that is in question.
ASKER
Most of this information seems to apply to the old FRS replication system. Does anyone know to what extent the new DFS Replication found in 2003R2 corrects these problems?
As I said earlier, if you don't exclude your DFS shares from Realtime scanning you're going to have replication issues - every time something touches those files (including FRS) they're scanned. This causes tremendous overhead on the server and can (and usually does) cause FRS to start staging files endlessly because it cannot get a lock on them.
I never mentioned turning off Realtime scanning altogether - not a wise move. Just exclude your DFS shares. They will get scanned during a normal schedule.
I never mentioned turning off Realtime scanning altogether - not a wise move. Just exclude your DFS shares. They will get scanned during a normal schedule.
Netmann66's advise is DEAD-ON. That fits into what the links I posted say, and is a good practice. The fact that you are using R2 will have no effect. R2 has a reworked DFS that running with less overhead and is far better, but the same still holds true with the way the AV is going to work with it.
enable the real time protection on the local file server, it will only scan its local copy. then a change is replicated it will scan it like any other file change. Uncheck network box so it only scans the local server, do ths on the server and the clients.
As long as the local server has SAV and real time on, there is never a nead to scan network
As long as the local server has SAV and real time on, there is never a nead to scan network
ASKER
"Just exclude your DFS shares."
That is what I'm not understanding. All the data on my file server is being replicated and shared via DFS (using multiple targets, no data in the actual DFS root). Isn't that what you are talking about when you say DFS shares? Or where you just talking about just excluding the DFS Root folders?
I'm sorry if it seems I keep asking the same question; I just want to make sure I fully understand the answer.
That is what I'm not understanding. All the data on my file server is being replicated and shared via DFS (using multiple targets, no data in the actual DFS root). Isn't that what you are talking about when you say DFS shares? Or where you just talking about just excluding the DFS Root folders?
I'm sorry if it seems I keep asking the same question; I just want to make sure I fully understand the answer.
Exclude all Shares belonging to the DFS Shares.
ASKER
That takes me back to what I was saying before. All of the data on this file server is being replicated by DFS; so your saying that I should exclude everything???
From what I have seen in my testing SAV 10 does not cause replication problems, so I'm just going to keep it real-time scanning the data and watch for problems.
From what I have seen in my testing SAV 10 does not cause replication problems, so I'm just going to keep it real-time scanning the data and watch for problems.