• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 990
  • Last Modified:

Antivirus solution for SAN shares

I am in the midst of deploying a SAN for the first time.  It's gone fairly well, but I've run into a decision I'm having some trouble with.  I can create file shares directly off of the SAN without creating a file server.  I'm stuck on backing up these file shares and protecting them with an anitvirus/antimalware solution.

Our current backup and antivirus solutions require an agent on the local machine.  Since there isn't a local machine for a SAN share, this obviously won't work.  I could map the shares as network drives to another machine that hosts both agents, but then I've jsut moves the processing load from one server to another.  

I'm thinking it will be easier in the long run just to create a file server using SAN for disk space, then install the agents and create the file shares from there.  I was trying to avoid burning a Server 2008 license, but I can't see another way to get all of this done.

What say you, Experts?  Create a new file server, scan from an existing server or ??
0
jcits
Asked:
jcits
2 Solutions
 
Thomas Zucker-ScharffSystems AnalystCommented:
I know you don't want to, but I suggest scanning from an existing server. I use vipre from gfi for this.  On the other hand my NAS has built in av sw. ( buffalo )
0
 
andyalderCommented:
You don't say what this SAN is so that doesn't help much. You AV and backup product details would help too.
0
 
Thomas Zucker-ScharffSystems AnalystCommented:
I use a buffalo linkstation.  It has a lot of software built into it.  Much of the setup was therefore very easy.  The AV is packaged as part of the buffalo NAS.  It also came with NovaStor's NovaBackup ( a couple of licenses) - not the best software - I like paragon's solution better and apparently NovaStor licenses some of paragon's software (you can't miss it).
0
How do you know if your security is working?

Protecting your business doesn’t have to mean sifting through endless alerts and notifications. With WatchGuard Total Security Suite, you can feel confident that your business is secure, meaning you can get back to the things that have been sitting on your to-do list.

 
jcitsAuthor Commented:
The SAN is an EMC VnXE3100.  We use Vipre for our antivirus and Microsoft DPM for backups.
0
 
andyalderCommented:
At close to $10K for an eVault for DPM appliance to do the backup with DPM I think you may be better off using a fileserver unless you use a separate backup outside of DPM to backup the VNX.

I think you'll find DPM won't backup shares mounted on another server since it can't snapshot them.
0
 
CarlosDominguezCommented:
You may install the EMC CAVA (AV agent) in your EMC VNX E3100. The AV agent is not from EMC, they are third party AV agents that are compatible with the SAN box. But in the case of Vipre, I think it is not an AV agent available for EMC VNX. As far as an AV product is not expensive, may you purchase and install another AV agent compatible. But it will not be managed from the same central console you have got.
http://blog.planetchopstick.com/2010/10/18/what-is-emc-cava-celerra-anti-virus-agent/

Another option, quite easy to implement as suggested, is to install resident your AV agent in a Windows machine with the shared folder mapped. The question here is: why do you think you need a Windows Server for that? I think a client windows machine must be perfectly ok to scan and keep the shared folder free of virus.

You cannot use DPM to backup to or from shared folders. If you really want to continue using DPM for it, I think you must use it as SAN (not SMB) directly connected to a server.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Network Scalability - Handle Complex Environments

Monitor your entire network from a single platform. Free 30 Day Trial Now!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now