• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 791
  • Last Modified:

Anti-Virus software for Hyper-V VMs?

We have some VMs installed a 2008 R2 in Hyper-V host. The host already install Symantec Endpoint anti-virus software.
Is it good or necessary to install anti-virus software in all VMs?
VMs are running Exchange email, Internal Web Portal, other applications.

Thank you.
0
dickchan
Asked:
dickchan
  • 4
  • 3
2 Solutions
 
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
You should treat ALL Servers Virtual and Physical with the same Security Profiles and Policies.

AntiVirus and Firewalls should be enabled in physical and virtual servers. scheduled scanning, on accessing scanning at the file level, email scanning and internet based scanning at the proxy gateway.
0
 
Lee W, MVPTechnology and Business Process AdvisorCommented:
In MOST respects you really have to think of VMs as nothing different from a regular server.  They need virus protection just like the host.  The host is NOT scanning inside the VMs and it's not scanning the memory of VMs, so those VMs are unprotected.  (Of course, you're using Symantec, so I would argue your host is unprotected as well - in My opinion, Symantec is the only commercially sold malicious software because their marketing team is THAT GOOD).  

I was trying to think of a basic analogy that might help people understand the concept of a VM... let me give it a try here:

Picture a large fish tank.  The fish tank needs an air pump or the fish in it die.  Now you want to put other fish in that tank... but the fish you already have are bigger and just might eat those smaller fish.  So you buy a smaller tank and to conserve space, you take a little water out the existing tank and sit the new tank WITHIN the larger tank with just enough water that it floats and actually keeps the fish separate from each other.  But, if you don't put an air pump on that smaller, inner tank, those fish will die - the pump on the larger thank has NO EFFECT on the inner tank.  It's the same thing with VMs.  While a few specific circumstances can affect both tanks, they are essentially SEPARATE environments that have to be each uniquely and fully maintained.  The benefit being that you're not using any more PHYSICAL space by having one tank in the other.
0
 
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
@leew interesting analogy! see my hobbies in profile!
0
Improve Your Query Performance Tuning

In this FREE six-day email course, you'll learn from Janis Griffin, Database Performance Evangelist. She'll teach 12 steps that you can use to optimize your queries as much as possible and see measurable results in your work. Get started today!

 
Lee W, MVPTechnology and Business Process AdvisorCommented:
Indeed - even better because the time stamps - you know I didn't just say that because you had posted!  :-)
0
 
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
@leew also my commercial large "air pump" which supplies the fish house, just a many tanks, and few thousands litres of water, pump failed and destroyed itself, no air for three days, I was away over Chrimbo period.....no fish casualties!
0
 
Lee W, MVPTechnology and Business Process AdvisorCommented:
So to go with my analogy... that would be like... the fan dying in a physical server... I'd say power supply, but if there were no deaths...

I should also point out, I'm not much of a fish person... I've had them a couple times in my life, but for the most part, I know basic concepts...
0
 
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
its a valid analogy, but we generally use air pumps in aquariums to run filters, no air, bacteria die, filter does not work, ammonia, nitrite rises and fish can die.

depending on size of aquarium, stocking levels, temperature, higher temp, less oxygen, oxygen gaseous takes place at water surface, hence why large surface area is important, and goldfish bowls, biorbs have less surface areas and may have issues, anyway ill stop with the fish......another passionate hobby, as wel! its off topic....dickchan sorry to blog in your post!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Improve Your Query Performance Tuning

In this FREE six-day email course, you'll learn from Janis Griffin, Database Performance Evangelist. She'll teach 12 steps that you can use to optimize your queries as much as possible and see measurable results in your work. Get started today!

  • 4
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now