Anti-Virus software for Hyper-V VMs?

We have some VMs installed a 2008 R2 in Hyper-V host. The host already install Symantec Endpoint anti-virus software.
Is it good or necessary to install anti-virus software in all VMs?
VMs are running Exchange email, Internal Web Portal, other applications.

Thank you.
dickchanAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
You should treat ALL Servers Virtual and Physical with the same Security Profiles and Policies.

AntiVirus and Firewalls should be enabled in physical and virtual servers. scheduled scanning, on accessing scanning at the file level, email scanning and internet based scanning at the proxy gateway.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Lee W, MVPTechnology and Business Process AdvisorCommented:
In MOST respects you really have to think of VMs as nothing different from a regular server.  They need virus protection just like the host.  The host is NOT scanning inside the VMs and it's not scanning the memory of VMs, so those VMs are unprotected.  (Of course, you're using Symantec, so I would argue your host is unprotected as well - in My opinion, Symantec is the only commercially sold malicious software because their marketing team is THAT GOOD).  

I was trying to think of a basic analogy that might help people understand the concept of a VM... let me give it a try here:

Picture a large fish tank.  The fish tank needs an air pump or the fish in it die.  Now you want to put other fish in that tank... but the fish you already have are bigger and just might eat those smaller fish.  So you buy a smaller tank and to conserve space, you take a little water out the existing tank and sit the new tank WITHIN the larger tank with just enough water that it floats and actually keeps the fish separate from each other.  But, if you don't put an air pump on that smaller, inner tank, those fish will die - the pump on the larger thank has NO EFFECT on the inner tank.  It's the same thing with VMs.  While a few specific circumstances can affect both tanks, they are essentially SEPARATE environments that have to be each uniquely and fully maintained.  The benefit being that you're not using any more PHYSICAL space by having one tank in the other.
0
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
@leew interesting analogy! see my hobbies in profile!
0
Powerful Yet Easy-to-Use Network Monitoring

Identify excessive bandwidth utilization or unexpected application traffic with SolarWinds Bandwidth Analyzer Pack.

Lee W, MVPTechnology and Business Process AdvisorCommented:
Indeed - even better because the time stamps - you know I didn't just say that because you had posted!  :-)
0
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
@leew also my commercial large "air pump" which supplies the fish house, just a many tanks, and few thousands litres of water, pump failed and destroyed itself, no air for three days, I was away over Chrimbo period.....no fish casualties!
0
Lee W, MVPTechnology and Business Process AdvisorCommented:
So to go with my analogy... that would be like... the fan dying in a physical server... I'd say power supply, but if there were no deaths...

I should also point out, I'm not much of a fish person... I've had them a couple times in my life, but for the most part, I know basic concepts...
0
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
its a valid analogy, but we generally use air pumps in aquariums to run filters, no air, bacteria die, filter does not work, ammonia, nitrite rises and fish can die.

depending on size of aquarium, stocking levels, temperature, higher temp, less oxygen, oxygen gaseous takes place at water surface, hence why large surface area is important, and goldfish bowls, biorbs have less surface areas and may have issues, anyway ill stop with the fish......another passionate hobby, as wel! its off topic....dickchan sorry to blog in your post!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Anti-Virus Apps

From novice to tech pro — start learning today.