RE: AntiVirus & ISA 2000

  • From: mithu@xxxxxxxxxx
  • To: isalist@xxxxxxxxxxxxx
  • Date: Thu, 18 Nov 2004 21:16:21 -0700

What about a worm that comes thru some unexpected future w2k
vulnerability?

Has anyone put Symantec AntiVirus Corporate for the server's own
protection in a ISA 2000 box?


> I see no reason to put AV on the firewall. How would it ever become
> infected? You never run the browser, you never run e-mail clients, you
> never run any client software or server software other than the ISA
> firewall software on it. You don't allow connections from hosts to any
> vulnerable ports either. So, the only function of AV software is to
> introduce perforamnce reduction and potential for increased attack
> surface.=20
> 
> HTH,
> 
> Tom
> www.isaserver.org/shinder
> Tom and Deb Shinder's Configuring ISA Server 2004
> http://tinyurl.com/3xqb7
> MVP -- ISA Firewalls
> 
> 
> -----Original Message-----
> From: Andrew English [mailto:andrew@xxxxxxxxxxxxxxxxxxxxxx]=20
> Sent: Thursday, November 18, 2004 8:32 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: AntiVirus & ISA 2000
> 
> http://www.ISAserver.org
> 
> I can't see why not? I use Trend Server Protect on my ISA 2004 box.=20
> 
> Andrew
> 
> 
> -----Original Message-----
> From: mithu@xxxxxxxxxx [mailto:mithu@xxxxxxxxxx]=20
> Sent: Thursday, November 18, 2004 8:27 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: AntiVirus & ISA 2000
> 
> http://www.ISAserver.org
> 
> To protect the server itself. Is Symantec AntiVirus Corp 9.0 an
> acceptable
> solution to run on the machine? Will it interfere with the ISA in
> anyway?
> 
> > Please clarify what you are asking about.
> >=20
> > Are you asking about AV to scan the data flowing through ISA, or are
> you
> > asking about AV to protect the server itself?
> >=20
> > John Tolmachoff
> > Engineer/Consultant/Owner
> > eServices For You
> >=20
> > > -----Original Message-----
> > > From: mithu@xxxxxxxxxx [mailto:mithu@xxxxxxxxxx]
> > > Sent: Thursday, November 18, 2004 10:29 AM
> > > To: [ISAserver.org Discussion List]
> > > Subject: [isalist] AntiVirus & ISA 2000
> > >=20
> > > http://www.ISAserver.org
> > >=20
> > > On this site it says don't install any applications on an ISA 2000
> box -
> > > now, does that include AntiVirus software?
> > >=20
> > > If AV software is allowable - what do you recommend? Is Norton
> AntiVirus
> > > Corporate 9.0 a workable solution on an ISA 2000 box?
> > >=20
> > > Thanks.
> > >=20


Other related posts: