what is best practice for anti virus on sql server and end users desktops

Posted on 2012-08-20
Last Modified: 2013-11-22
we are running sbs2003 and are big users of sql server and sage
the system is painfully slow
i removed antivirus from the server and 1 client and it has made a significant difference
we are also running a sonicwall with gatewat antivirus spyware  and intrusion prevention
we tried adding exclussions to the server av but didnt make much difference
my question is this
do i need antivirus if im running the sonicwall gateway ant virus and we dont allow users to bring in removable media

do i need to add sql exclussions to the desktop computers
Question by:dougdog
    LVL 10

    Expert Comment

    We strongly recommend that you individually assess the security risk for each computer that is running SQL Server in your environment and that you select the tools that are appropriate for the security risk level of each computer that is running SQL Server. Additionally, we recommend that before you roll out any virus-protection project, you test the whole system under a full load to measure any changes in stability and performance.

    Vulnerability scanning software: The Microsoft Security Tool Kit CD includes best practice guidelines, information about how to help secure your system, and service packs and updates that can protect your system against virus attacks. It also provides Microsoft tools to help you secure your systems and keep them secure. To download it, visit the following Microsoft website:

    Antispyware software: Spyware and unwanted software refers to software that performs certain tasks on your computer, typically without your consent. For more information about how to help protect the computer from spyware and unwanted software, visit the following Microsoft website:

    More Information

    Author Comment

    this has not answered my questions
    what exclussions do i need on server and desktop

    do i need antivirus if running gateway antivirus
    LVL 23

    Accepted Solution

    Best practice is not to have an antivirus on SQL server but Microsoft says otherwise except with some considerations to take.

    I personally run MS essential security on my SQL servers and that doesn't affect the performance and keep server clean from Viruses esp that I have 2 firewalls in my office.

    Please take a look at MS KB

    Also this is a useful link in case u decided to go on with installing one

    Author Comment

    can security essentials be ran on business os
    LVL 23

    Expert Comment

    by:Mohammed Hamada
    I think it does, not sure though.. You can give that a try and install it..
    it's a free product by Microsoft.

    Author Comment

    what about the fact that this is a sbs 2003 server so exchange and file and print services are runnning on it
    LVL 23

    Expert Comment

    by:Mohammed Hamada
    The MSSE usually takes small amount of resources, I have been monitoring the performance and the Memory required is around 10 to 15MB, the CPU is usually idle except when there's a full scan scheduled.

    When there's SQL queries being forwarded from the server you will notice a slight difference though however, If you have all those apps and services on the same server I think it will be higher than usual but won't affect the server performance that much.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Highfive Gives IT Their Time Back

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    by Mark Wills Attending one of Rob Farley's seminars the other day, I heard the phrase "The Accidental DBA" and fell in love with it. It got me thinking about the plight of the newcomer to SQL Server...  So if you are the accidental DBA, or, simp…
    You may have discovered the 'Compatibility View Settings' workaround for making your SBS 2008 Remote Web Workplace 'connect to a computer' section stops 'working around' after a Windows 10 client upgrade.  That can be fixed so it 'works around' agai…
    In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…
    Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    10 Experts available now in Live!

    Get 1:1 Help Now