Risorse per professionisti IT > Home page del forum > Forefront Security for SharePoint > Regarding SP / SQL Interaction And Server Design
Formula una domandaFormula una domanda
 

DomandaRegarding SP / SQL Interaction And Server Design

  • lunedì 6 aprile 2009 19.07phpnuke23 Medaglie utenteMedaglie utenteMedaglie utenteMedaglie utenteMedaglie utente
     
    I am trying to wrap my head around this deployment so I ensure it is correct.

    So, from a Forefront standpoint, I know it should be on all production SharePoint WFE's. However, if I have separate farm (a development farm) which uses the same SQL cluster as the production farm do I need to install it there as well? I know I SHOULD since it would protect all my SharePoint stuff, however I am wondering if a user uploads an infected document to my production farm does it put my development farm at risk from a SQL perspective?

    In my head, it doesn't...but I wanted to make sure...

Tutte le risposte

  • giovedì 30 aprile 2009 13.15Alex Gray - MSFT Medaglie utenteMedaglie utenteMedaglie utenteMedaglie utenteMedaglie utente
     

    Basically, no. You do not need Forefront. The reasons for this are that if you have 2 FE environment using the same physical SQL server, they do not use the same database so data stored in your production database will not be accessed from your development environment and vice versa. Also, sharepoint really is not at risk from viruses. It is the client systems which are at risk as a virus needs to be opened in such a way that it can execute the malware. Sharepoint only actually reads the documents stored inside it when it indexes the database for future searches. During this indexing process, the documents are not actuall opened but the binary data is passed from sql to sharepoint and the text of the document extracted. As this is simple text it does not have the possiblity to execute any code. I hope this answers your query.