0

I'm currently reviewing our AV configuration for our environment, and reviewing how the real-time scanner is configured. The options that I have for the real-time configuration is as follows.

On Read On Write On Read and Write

I could not find any specific recommendations from the vendor (TrendMicro OfficeScan) for configuring the real-time scan engine.

I would just like to get some other individuals ideas and thoughts on how they determine the real-time AV config for their environments. Do you use different methodologies for desktops and server systems? Any particular server roles (IIS, DC, SQL) where you would configure one realtime method over another?

danorth
  • 65
  • 5

1 Answers1

0

I would think that you would want real time scanning active for both Read and Write operations. Make sure to configure the appropriate exclusions for the server roles that you have (DC, IIS, SQL, etc).

joeqwerty
  • 109,901
  • 6
  • 81
  • 172
  • That is what I am currently configuring, however I have read some articles discussing real time scanning and how scanning on write does not offer any additional protection. I'm currently reviewing all of the exclusions are set correctly for the apps on the system. – danorth May 02 '11 at 02:14