Best Practice for Server Anti-Virus

[Jobos]

So I'm in the middle of moving the school AV from Kaspersky to Eset and it's time to install on the servers. What is the recommended settings for a server as I've been looking at old posts and there seems to be conflicting advice. Some say don't have real time scanning just a scheduled scan as workstations scan network drives while others say have server real time scanning enabled and disable the workstation network scanning.

 

I can see positives in both ways just wondered what others do?

[fairm010]

My servers all have on access scanning enabled apart from my file servers and SQL servers. They are on a scheduled scan to scan before their nightly backups at 1AM as not to degrade performance.

[Jobos]

My servers all have on access scanning enabled apart from my file servers and SQL servers. They are on a scheduled scan to scan before their nightly backups at 1AM as not to degrade performance.

 

Thanks, this appears to be the most popular file server AV configuration and I think the best way to go.

[ITGURU]

There's a starting point here as to what you should exclude for AD/DNS Servers, SQL, etc- https://support.microsoft.com/en-us/kb/822158

Works for me, never had any issues.

[computer_expert]

There's a starting point here as to what you should exclude for AD/DNS Servers, SQL, etc- https://support.microsoft.com/en-us/kb/822158

Works for me, never had any issues.

 

You can find a shedload more here: Microsoft Anti-Virus Exclusion List - TechNet Articles - United States (English) - TechNet Wiki