Sophos vs. Hyper-V Host

[Gongalong]

Hi folks,

 

Would running Sophos AV on a Hyper-V host be problematic?

 

I installed this on Friday afternoon, and have had a handful of VMs BSODing on and off since.

 

Event Viewer is not much help, just stating that the VMs became unresponsive. Only via the VM viewer did I spot the VMs BSODing.

 

In any event I have uninstalled Sophos in case this isn't coincidence, but would like to know if it would cause an issue.

 

TIA

[SYNACK]

If the VM files and processes are not excluded from the active / realtime scanner then it could do this. If it adds in additional network filters for its own monitoring this could also cause such breakages. As long as it is configured right and frankly it should leave well enough alone by default it should be able to work, may just need tweaking.

[VeryPC_Ed]

oooh - AV on hypervisor ! - I can see a huge can of worms opening as there will most definitely be some argument back and forth on this one !

 

There is a great post from Aidan Finn who is the MVP for Hyper-V (So … I Prefer No Antivirus on Hyper-V Hosts?) about Antivirus and Hypervisors, followed him for quite a while and he is an excellent source of Hyper-V info.

 

Another good resource linked from his post is Virus scanning recommendations for Enterprise computers that are running currently supported versions of Windows which is Microsoft's Virus scanning recommendations for Enterprise computers which would probably be worth checking vs your current exclusions.

[sparkeh]

I use sophos on hyper-v, I just followed the MS guidance and haven't had any issues.

[mattianuk]

Sophs n our cluster hosts stopped any migrations.

[Gongalong]

I've taken Sophos off the hosts for now because the BSODs continued. These hosts never get touched by anything other than running VMs, so virus infection is very unlikely.