A server antivirus can provide some protection for downstream computers if it is configured correctly and has network protection capabilities.
This can help prevent the spread of malware from infected computers to other devices on the network.
However, it is important to note that each downstream computer should still have its own antivirus software installed for comprehensive protection.
Antivirus Software Price in Nepal-Updated list with best buying guide here.
Table of Contents
Antivirus on Servers is the Best Practice
Antivirus protection on servers is an important aspect of securing a network. Here are some best practices for implementing antivirus on servers:
Keep the antivirus software up to date:
Regularly update the antivirus software to ensure that it is equipped to detect and prevent the latest threats.
Perform regular scans:
Schedule regular scans to detect any potential threats on the server.
Use real-time protection:
Enable real-time protection to catch threats in real-time as they occur.
Exclude necessary files and directories:
Make the necessary exclusions for files and directories that are essential for the functioning of the server and its applications, as recommended by the antivirus software manufacturer.
Monitor logs and alerts:
Regularly monitor the logs and alerts generated by the antivirus software to identify any potential threats.
Implement access controls:
Limit access to the server to only authorized users and implement strong authentication methods.
Train users:
Educate users on safe computing practices to minimize the risk of introducing malware to the network.
Have a backup and disaster recovery plan:
Regularly back up critical data and have a disaster recovery plan in place to restore the server in case of an attack.
By following these best practices, you can help ensure the security of your server and prevent the spread of malware within your network.
Microsoft Recommended Antivirus Exclusions
Microsoft recommends certain Antivirus exclusions to ensure the smooth operation of certain Microsoft products and services.
These exclusions help prevent the antivirus software from interfering with certain processes or files that are essential to the functioning of the Microsoft products.
Some common exclusions recommended by Microsoft are:
- Windows operating system files and directories (e.g. %windir% and %windir%\System32).
- Microsoft Office files and directories (e.g. %programfiles%\Microsoft Office).
- Exchange Server files and directories (e.g. %programfiles%\Microsoft\Exchange Server).
- SharePoint Server files and directories (e.g. %programfiles%\Microsoft Office Servers).
- SQL Server files and directories (e.g. %programfiles%\Microsoft SQL Server).
It is important to note that excluding files and directories from antivirus scans can increase the risk of malware infections and it is only recommended to make these exclusions if the Microsoft products are unable to function correctly without them.
Additionally, the exclusions should be kept to a minimum for security reasons.
Windows Server 2019 Antivirus Exclusions
Microsoft recommends the following Antivirus exclusions for Windows Server 2019:
- Windows operating system files and directories (e.g. %windir% and %windir%\System32).
- Microsoft Office files and directories (e.g. %programfiles%\Microsoft Office).
- Exchange Server files and directories (e.g. %programfiles%\Microsoft\Exchange Server).
- SharePoint Server files and directories (e.g. %programfiles%\Microsoft Office Servers).
- SQL Server files and directories (e.g. %programfiles%\Microsoft SQL Server).
- Windows Defender files and directories (e.g. %programfiles%\Windows Defender).
- Remote Procedure Call (RPC) and Distributed Component Object Model (DCOM) traffic.
- Windows Management Instrumentation (WMI) traffic.
It is important to note that excluding files and directories from antivirus scans can increase the risk of malware infections and it is only recommended to make these exclusions if the Microsoft products are unable to function correctly without them.
Additionally, the exclusions should be kept to a minimum for security reasons.
Microsoft recommended antivirus exclusions for Active Directory
Microsoft recommends the following Antivirus exclusions for Active Directory:
- The SYSVOL directory (e.g. %systemroot%\SYSVOL).
- The NTDS database file (e.g. %systemroot%\NTDS\ntds.dit).
- The Active Directory log files directory (e.g. %systemroot%\Debug\AD).
- The Active Directory database backup directory (e.g. %systemroot%\Backup).
- Remote Procedure Call (RPC) and Distributed Component Object Model (DCOM) traffic.
- Windows Management Instrumentation (WMI) traffic.
It is important to note that excluding files and directories from antivirus scans can increase the risk of malware infections and it is only recommended to make these exclusions if Active Directory is unable to function correctly without them.
Additionally, the exclusions should be kept to a minimum for security reasons.
Microsoft recommended antivirus exclusions Windows 10
Microsoft recommends the following Antivirus exclusions for Windows 10:
- Windows operating system files and directories (e.g. %windir% and %windir%\System32).
- Microsoft Office files and directories (e.g. %programfiles%\Microsoft Office).
- Windows Defender files and directories (e.g. %programfiles%\Windows Defender).
- Remote Procedure Call (RPC) and Distributed Component Object Model (DCOM) traffic.
- Windows Management Instrumentation (WMI) traffic.
It is important to note that excluding files and directories from antivirus scans can increase the risk of malware infections and it is only recommended to make these exclusions if the Microsoft products are unable to function correctly without them.
Additionally, the exclusions should be kept to a minimum for security reasons.
