Virus Scans - Realtime or Scheduled???

  • I've read a few discussions about virus software where people indicated not running realtime scans.  Is the performance hit of a realtime scan not worth the protection it provides vs. a shceduled scan?

    Thanks,    Dave

  • Dave,

    Are you referring to scanning anything on the server except the data & log files?

    We have real-time protection enabled on most of our servers & have not seen a performance hit with it.  We did exclude all mdf, ndf & ldf files from being scanned. 

    I guess it would depend on how much is going on on the server that isn't through SQL Server.  Like if you are doing file sharing on the server as well & files are being swapped out quite a bit, I could see that realtime protection might start taking a hit on your server.  Otherwise I don't see an issue with it.

    Just my humble opinion,

    John

  • I agree with John.  What I have typically seen is to enable real-time scanning and if performance is a concern then just set the database files (or Data directory) as exclusions to that real-time scanning.

    As far as results of that I have heard mixed reviews- some swear it helps, others think not a big deal.  I have not done or seen any real benchmarking on it though.

    And for those who setup that exclusion for the real-time scanning they can always scan those files (exclusions) in a scheduled sweep during off-hours - of course scheduled hopefully not to interfere with any off-hours scheduled jobs running at those times too.

  • Thanks all.  I've asked the following be excluded from scans.

    Database and Backup Files

    .mdf

    .ndf

    .ldf

    .bak

    .trn

     

    Full Text Catalogs

    FTDATA directory (Only the location referenced by SQL Server)

     

    Pagefile

    C:\pagefile.sys  (Only the location referenced by the OS)

     

Viewing 4 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic. Login to reply