Security

Ask something
Discussion Locked

Server need Antivirus? and Firewall?

0 helpful
10 replies

by tink!

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

The current network was already setup when I started here, including the DSL.

We are going to be upgrading to all new machines, including the server and I want to do everything right, right from the start.

We have a domain-based network. All clients and the server are plugged into one hub. The DSL router is also plugged into the same hub, thereby allowing the clients to have direct access to the internet.

The server's web browser has never been setup to access the internet. But I feel that the server is still vulnerable due to the clients all having access and everyone being plugged into the same hub. I do know that one of the clients has acquired viruses before (prior to my installing anti-virus) and it did not affect the server or network. But am I right in thinking there's a possibility of something spreading to the server? If a client gets a virus or hacked, can this intrusion also access the server through the client?

Should I put Anti-Virus software on the server?

The router has a decent firewall, but should I put one on the server too? and maybe even the clients as well?

10 replies

by jamesrl

If the server has shared spaces where users can write files, then it should have anti-virus on it. There have been viruses that store themselves in things like word macros or gifs, that may find their way onto file servers when users do backups or shares.

As for a firewall, I am more convinced you should focus more on the edge device, like the router. A separate firewall between the router and the net would be a good idea.

James

by tink!

Ok. I loath to get anti-virus for the server because it puts us 1 license over the 5 we get in the package deal, so what is your input on the following scenarios?
- What if each of the clients has properly working anti-virus that scans incoming emails?
And what if I get firewalls for each of the clients?
- Or should I have the server connect to the internet and then the clients access the web through the server? Then I'd protect the server with anti-virus and firewall (would I still need anti-virus on the clients?)

by bfilmfan

If your server becomes corrupted, what does it cost the company and yourself to replace those files?

Time to restore?

Lost business revenue?

Legal settlements?

Court Fines?

This could become really expensive if somewhere in the list "out of business" and "fired for incompotence" shows up on the list.

What's the cost of that license again?

by tink!

So...is it better to leave the clients accessing the web directly through the hub and DSL router OR
have the server connected to the web and then have the clients access Internet thru the server?

And then, assuming I setup the server to the web and the clients thru the server, if I put anti-virus and firewall on server, do I still need to do so on the clients?

by charliespencer

Anti-virus software is part of the cost of operating a server, just like a hardware maintenance contract and a backup system.

Regardless of how you route the traffic, you need AV software on ALL machines. Not all viruses come over the internet. Users will bring files from home to contaminate your client machines. You need AV on them too.

by nzbn

Ever had the feeling of OH F##########k what has happened to my pc and that was just your home one imagine if you lost millions of dollars worth of data or your transaction records stored in naughts and ones on your server . Get NOD32 and save yourself the headaches to come

by antuck

If it's a Windows server then YES an AV and firewall are needed.

For the AV I would get something like Symantec Corp edition. Something that resides on the server and maintains updates then passes them out to the clients.

I wouldn't run anything without a AV and firewall. And some kind of spy/ad ware removal.

by tink!

Thanks. Actually we are already using Kaspersky Anti-virus. And we're going to be getting Kaspersky Anti-Hacker for the new server.

This discussion is closed to new replies.