Solved

Antivirus solution for SAN shares

Posted on 2012-03-22
6
956 Views
Last Modified: 2013-11-22
I am in the midst of deploying a SAN for the first time.  It's gone fairly well, but I've run into a decision I'm having some trouble with.  I can create file shares directly off of the SAN without creating a file server.  I'm stuck on backing up these file shares and protecting them with an anitvirus/antimalware solution.

Our current backup and antivirus solutions require an agent on the local machine.  Since there isn't a local machine for a SAN share, this obviously won't work.  I could map the shares as network drives to another machine that hosts both agents, but then I've jsut moves the processing load from one server to another.  

I'm thinking it will be easier in the long run just to create a file server using SAN for disk space, then install the agents and create the file shares from there.  I was trying to avoid burning a Server 2008 license, but I can't see another way to get all of this done.

What say you, Experts?  Create a new file server, scan from an existing server or ??
0
Comment
Question by:jcits
6 Comments
 
LVL 26

Expert Comment

by:Thomas Zucker-Scharff
ID: 37752995
I know you don't want to, but I suggest scanning from an existing server. I use vipre from gfi for this.  On the other hand my NAS has built in av sw. ( buffalo )
0
 
LVL 55

Expert Comment

by:andyalder
ID: 37754083
You don't say what this SAN is so that doesn't help much. You AV and backup product details would help too.
0
 
LVL 26

Expert Comment

by:Thomas Zucker-Scharff
ID: 37754114
I use a buffalo linkstation.  It has a lot of software built into it.  Much of the setup was therefore very easy.  The AV is packaged as part of the buffalo NAS.  It also came with NovaStor's NovaBackup ( a couple of licenses) - not the best software - I like paragon's solution better and apparently NovaStor licenses some of paragon's software (you can't miss it).
0
Give your grad a cloud of their own!

With up to 8TB of storage, give your favorite graduate their own personal cloud to centralize all their photos, videos and music in one safe place. They can save, sync and share all their stuff, and automatic photo backup helps free up space on their smartphone and tablet.

 

Author Comment

by:jcits
ID: 37754360
The SAN is an EMC VnXE3100.  We use Vipre for our antivirus and Microsoft DPM for backups.
0
 
LVL 55

Accepted Solution

by:
andyalder earned 250 total points
ID: 37754700
At close to $10K for an eVault for DPM appliance to do the backup with DPM I think you may be better off using a fileserver unless you use a separate backup outside of DPM to backup the VNX.

I think you'll find DPM won't backup shares mounted on another server since it can't snapshot them.
0
 
LVL 5

Assisted Solution

by:CarlosDominguez
CarlosDominguez earned 250 total points
ID: 37756649
You may install the EMC CAVA (AV agent) in your EMC VNX E3100. The AV agent is not from EMC, they are third party AV agents that are compatible with the SAN box. But in the case of Vipre, I think it is not an AV agent available for EMC VNX. As far as an AV product is not expensive, may you purchase and install another AV agent compatible. But it will not be managed from the same central console you have got.
http://blog.planetchopstick.com/2010/10/18/what-is-emc-cava-celerra-anti-virus-agent/

Another option, quite easy to implement as suggested, is to install resident your AV agent in a Windows machine with the shared folder mapped. The question here is: why do you think you need a Windows Server for that? I think a client windows machine must be perfectly ok to scan and keep the shared folder free of virus.

You cannot use DPM to backup to or from shared folders. If you really want to continue using DPM for it, I think you must use it as SAN (not SMB) directly connected to a server.
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Usually shares are where we want them for our users and we tend to take them for granted. There are times, however, when those shares may disappear causing difficulty for your users. One of the first things to try is searching for files that shou…
Create your own, high-performance VM backup appliance by installing NAKIVO Backup & Replication directly onto a Synology NAS!
This video teaches viewers how to encrypt an external drive that requires a password to read and edit the drive. All tasks are done in Disk Utility. Plug in the external drive you wish to encrypt: Make sure all previous data on the drive has been …
This tutorial will walk an individual through the process of installing the necessary services and then configuring a Windows Server 2012 system as an iSCSI target. To install the necessary roles, go to Server Manager, and select Add Roles and Featu…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now