Solved

Antivirus solution for SAN shares

Posted on 2012-03-22
6
963 Views
Last Modified: 2013-11-22
I am in the midst of deploying a SAN for the first time.  It's gone fairly well, but I've run into a decision I'm having some trouble with.  I can create file shares directly off of the SAN without creating a file server.  I'm stuck on backing up these file shares and protecting them with an anitvirus/antimalware solution.

Our current backup and antivirus solutions require an agent on the local machine.  Since there isn't a local machine for a SAN share, this obviously won't work.  I could map the shares as network drives to another machine that hosts both agents, but then I've jsut moves the processing load from one server to another.  

I'm thinking it will be easier in the long run just to create a file server using SAN for disk space, then install the agents and create the file shares from there.  I was trying to avoid burning a Server 2008 license, but I can't see another way to get all of this done.

What say you, Experts?  Create a new file server, scan from an existing server or ??
0
Comment
Question by:jcits
6 Comments
 
LVL 27

Expert Comment

by:Thomas Zucker-Scharff
ID: 37752995
I know you don't want to, but I suggest scanning from an existing server. I use vipre from gfi for this.  On the other hand my NAS has built in av sw. ( buffalo )
0
 
LVL 55

Expert Comment

by:andyalder
ID: 37754083
You don't say what this SAN is so that doesn't help much. You AV and backup product details would help too.
0
 
LVL 27

Expert Comment

by:Thomas Zucker-Scharff
ID: 37754114
I use a buffalo linkstation.  It has a lot of software built into it.  Much of the setup was therefore very easy.  The AV is packaged as part of the buffalo NAS.  It also came with NovaStor's NovaBackup ( a couple of licenses) - not the best software - I like paragon's solution better and apparently NovaStor licenses some of paragon's software (you can't miss it).
0
Three Reasons Why Backup is Strategic

Backup is strategic to your business because your data is strategic to your business. Without backup, your business will fail. This white paper explains why it is vital for you to design and immediately execute a backup strategy to protect 100 percent of your data.

 

Author Comment

by:jcits
ID: 37754360
The SAN is an EMC VnXE3100.  We use Vipre for our antivirus and Microsoft DPM for backups.
0
 
LVL 55

Accepted Solution

by:
andyalder earned 250 total points
ID: 37754700
At close to $10K for an eVault for DPM appliance to do the backup with DPM I think you may be better off using a fileserver unless you use a separate backup outside of DPM to backup the VNX.

I think you'll find DPM won't backup shares mounted on another server since it can't snapshot them.
0
 
LVL 5

Assisted Solution

by:CarlosDominguez
CarlosDominguez earned 250 total points
ID: 37756649
You may install the EMC CAVA (AV agent) in your EMC VNX E3100. The AV agent is not from EMC, they are third party AV agents that are compatible with the SAN box. But in the case of Vipre, I think it is not an AV agent available for EMC VNX. As far as an AV product is not expensive, may you purchase and install another AV agent compatible. But it will not be managed from the same central console you have got.
http://blog.planetchopstick.com/2010/10/18/what-is-emc-cava-celerra-anti-virus-agent/

Another option, quite easy to implement as suggested, is to install resident your AV agent in a Windows machine with the shared folder mapped. The question here is: why do you think you need a Windows Server for that? I think a client windows machine must be perfectly ok to scan and keep the shared folder free of virus.

You cannot use DPM to backup to or from shared folders. If you really want to continue using DPM for it, I think you must use it as SAN (not SMB) directly connected to a server.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I previously wrote an article addressing the use of UBCD4WIN and SARDU. All are great, but I have always been an advocate of SARDU. Recently it was suggested that I go back and take a look at Easy2Boot in comparison.
How to update Firmware and Bios in Dell Equalogic PS6000 Arrays and Hard Disks firmware update.
This Micro Tutorial will teach you how to reformat your flash drive. Sometimes your flash drive may have issues carrying files so this will completely restore it to manufacturing settings. Make sure to backup all files before reformatting. This w…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question