Forefront Client Security Client on a File Server - Or Not?
Does anyone else have the Forefront Client Security client installed on their Windows 2008 file server? We recently ran into an issue where we had to disable the real-time protection of a malware product (CounterSpy) on our file server because it was causing lockups every week or so. We continue to keep the Forefront Client running on the server in real-time mode however.
In talking to my colleages, I've found that many say they do not have AV or Malware protection running on their file server; they say they stay protected at the client-pc level so why put that load on the server? Some have AV and Malware installed but don't run it in real-time mode, they only scan their servers every night. I've never looked at it that way and wonder what others are doing in the same situation.
Orange County District Attorney
Answers
- Hi Nick,
Our standard AV / Malware products are Forefront Client Security and CounterSpy Enterprise. We use them both on our clients. Up until recently, we've used them both on our main file server. After having the lockup problems I mentioned, we contacted Microsoft Support for help in figuring out the problem. After sending them a MEMORY.DMP file, the told us that the CounterSpy program was most likely the issue. At that point we disabled the real-time function of CounterSpy and increased the scheduled scans in CounterSpy. We kept Forefront Client Security installed and configured to scan and operate in read-time mode.
Since then, we haven't had any lockups. I'm guessing that there probably was an issue with CounterSpy and/or it's cohabitation with Forefront Client Security. I'm not sure which. My success got me to thinking that maybe I should shut off the real-time part of Forefront as it may be slowing some things on our much used file server.
Orange County District Attorney- Marked As Answer byNick Gu - MSFTMSFT, ModeratorTuesday, October 06, 2009 5:54 AM
All Replies
Hi,
Thank you for your post.
Before going any further, I’d like to know the following question:
1.Do you have installed any other roles or other antivirus software on the file server?
2.Would you please provide some related error message ?
As far as I know, if the antivirus software utilize too much processor time and resources may cause lockups and slowdowns. Meanwhile, you can deploy some schedule scans for your file server and see if it works when disabled the real-time protection.
Regards,
Nick Gu - MSFT- Hi Nick,
Our standard AV / Malware products are Forefront Client Security and CounterSpy Enterprise. We use them both on our clients. Up until recently, we've used them both on our main file server. After having the lockup problems I mentioned, we contacted Microsoft Support for help in figuring out the problem. After sending them a MEMORY.DMP file, the told us that the CounterSpy program was most likely the issue. At that point we disabled the real-time function of CounterSpy and increased the scheduled scans in CounterSpy. We kept Forefront Client Security installed and configured to scan and operate in read-time mode.
Since then, we haven't had any lockups. I'm guessing that there probably was an issue with CounterSpy and/or it's cohabitation with Forefront Client Security. I'm not sure which. My success got me to thinking that maybe I should shut off the real-time part of Forefront as it may be slowing some things on our much used file server.
Orange County District Attorney- Marked As Answer byNick Gu - MSFTMSFT, ModeratorTuesday, October 06, 2009 5:54 AM
- Hiif you have Forefront CS running on a file server and it continually scans and then continually asks for a reboot to "complete the removal" what do people do in these circumstances.thanks
