[OpenAFS] Server-side Antivirus

Steve Devine sdevine@msu.edu
Tue, 16 Oct 2007 08:18:26 -0400


Smith, Matt wrote:
> Thank you for the responses.  I was guessing that there were not many
> options for AFS-aware AV products.  So, let me ask then about best
> practice.  What do you all do to keep viruses out of cell?
>
> * Assume all accessing workstations have up-to-date AV ?
> * Some network layer AV/IDS ?  I'm guessing none of these are AFS aware
> either.
> * Scheduled scans of the entire AFS space ?
> * Carry a lucky 4-leaf clover?
>
> Thank you,
> -Matt
>
> On Mon, 2007-10-15 at 10:52 -0400, Smith, Matt wrote:
>   
>> Can anyone recommend a server-side Antivirus product that provides
>> real-time (on write) server-side virus detection on my FS servers?  My
>> AFS servers are all Debian Etch.
>>
>> Thank you,
>> -Matt Smith
>>
>>     
Just my 2 cents:
Afs is a filesystem. Its core responsibility is to store and protect 
files.  All I want from AFS is file integrity. So a file I copied into 
AFS 3 years ago should be the exact same file today.
Virus's and all.
Virus scanning is someone / something else's responsibility, not AFS's.
/sd

-- 

Steve Devine
Network Storage and Printing
Academic Computing & Network Services
Michigan State University

506 Computer Center
East Lansing, MI 48824-1042
1-517-432-7327

Baseball is ninety percent mental; the other half is physical.
- Yogi Berra