Click here to monitor SSC
SQLServerCentral is supported by Red Gate Software Ltd.
 
Log in  ::  Register  ::  Not logged in
 
 
 
        
Home       Members    Calendar    Who's On


Add to briefcase 12»»

Antivirus on large SQL Server instances Expand / Collapse
Author
Message
Posted Sunday, December 1, 2013 6:53 AM


SSCrazy

SSCrazySSCrazySSCrazySSCrazySSCrazySSCrazySSCrazySSCrazy

Group: General Forum Members
Last Login: Today @ 6:11 AM
Points: 2,655, Visits: 6,017
All, I'm having an issue where my current antivirus vendor is having issues when scanning my larger sql server machines. These are servers with large amounts of memory 256 GB with >115 GB in use. It appears that when the scan begins to scan the memory, prior to scanning the files, it chokes when it sees all of that memory in use. This causes significant resource contention including timeouts when connecting to SQL Server. We've already contacted the vendor for an enhancement request, but it seems they are unlikely to act on it quickly.

Is anyone else out there running machines with large amounts of memory with large amounts in use and running antivirus. If so what are you running and how is it performing for you? I'm about to deploy machines with even more memory and I'm concerned this issue will continue, and I'm looking for other alternatives. Local policies state I need to have AV installed and scanning daily (so uninstalling isn't an option), I'm just looking for one that will work with my current systems.

Thanks,
-Luke.


To help us help you read this

For better help with performance problems please read this
Post #1518697
Posted Sunday, December 1, 2013 8:38 AM
SSC-Enthusiastic

SSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-Enthusiastic

Group: General Forum Members
Last Login: Friday, September 5, 2014 6:19 AM
Points: 147, Visits: 591
Hi,
in our environment we have excluded mdf,ldf,ndf files from antivirus scanning.




Praveen D'sa
MCITP - Database Administrator 2008
http://sqlerrors.wordpress.com
Post #1518700
Posted Sunday, December 1, 2013 9:44 AM


SSCrazy

SSCrazySSCrazySSCrazySSCrazySSCrazySSCrazySSCrazySSCrazy

Group: General Forum Members
Last Login: Today @ 6:11 AM
Points: 2,655, Visits: 6,017
Yes, we do that as well. It is a failing of the product. Not the way it is configured. I'm looking for what av products other people are using on sql servers with large amounts of memory.

Thanks.
Luke.


To help us help you read this

For better help with performance problems please read this
Post #1518704
Posted Sunday, December 1, 2013 5:54 PM


SSC-Dedicated

SSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-Dedicated

Group: General Forum Members
Last Login: Today @ 2:36 PM
Points: 35,776, Visits: 32,448
I don't have an answer right now but I have a friend that works with servers that half a half TByte and more. I know he's running some form of AV on them. I'll try to remember to ask him tomorrow.

--Jeff Moden
"RBAR is pronounced "ree-bar" and is a "Modenism" for "Row-By-Agonizing-Row".

First step towards the paradigm shift of writing Set Based code:
Stop thinking about what you want to do to a row... think, instead, of what you want to do to a column."

(play on words) "Just because you CAN do something in T-SQL, doesn't mean you SHOULDN'T." --22 Aug 2013

Helpful Links:
How to post code problems
How to post performance problems
Post #1518727
Posted Sunday, December 1, 2013 6:18 PM


SSCrazy

SSCrazySSCrazySSCrazySSCrazySSCrazySSCrazySSCrazySSCrazy

Group: General Forum Members
Last Login: Today @ 6:11 AM
Points: 2,655, Visits: 6,017
Thanks Jeff! We're looking at upgrading to systems in that neighborhood and want to get this resolved prior to putting them into production.
Luke.


To help us help you read this

For better help with performance problems please read this
Post #1518731
Posted Monday, December 2, 2013 3:36 AM
Valued Member

Valued MemberValued MemberValued MemberValued MemberValued MemberValued MemberValued MemberValued Member

Group: General Forum Members
Last Login: Friday, December 5, 2014 9:03 AM
Points: 74, Visits: 567
We use A/V on our servers and a lot of our production SQL Servers have anything from 256GB to 1TB of memory. As well as setting the file exclusions as stated above, we also configured the A/V not to scan the sqlserver.exe service/process or any spawned child processes, and that seems to work fine.

Post #1518822
Posted Monday, December 2, 2013 4:54 AM


SSCrazy

SSCrazySSCrazySSCrazySSCrazySSCrazySSCrazySSCrazySSCrazy

Group: General Forum Members
Last Login: Today @ 6:11 AM
Points: 2,655, Visits: 6,017
I believe the SQLSERVER.exe process is excluded as well. I'm uncertain if we have the option to exclude all spawned processes, but I'll check.

Can you tell me which AV you are using? If you would rather not post it publicly please send me a private message.

Thanks,
-Luke.


To help us help you read this

For better help with performance problems please read this
Post #1518845
Posted Monday, December 2, 2013 8:14 AM
SSC Eights!

SSC Eights!SSC Eights!SSC Eights!SSC Eights!SSC Eights!SSC Eights!SSC Eights!SSC Eights!

Group: General Forum Members
Last Login: Tuesday, December 2, 2014 5:58 AM
Points: 924, Visits: 1,445
McAfee Enterprise runs fine on our servers.

512 GB of RAM

We use the exclusions mentioned above and do not have contention with the memory scan.

Steve



Post #1518912
Posted Monday, December 2, 2013 11:10 AM


SSC-Dedicated

SSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-Dedicated

Group: General Forum Members
Last Login: Today @ 2:36 PM
Points: 35,776, Visits: 32,448
Luke L (12/1/2013)
Thanks Jeff! We're looking at upgrading to systems in that neighborhood and want to get this resolved prior to putting them into production.
Luke.


Wow! I talked with that DBA (he has literally dozens of multi-terrabyte databases on his servers and, as I said before, a half Tbyte of memory or more on those servers) and he doesn't run any form of anti-virus on them. I didn't have the time to talk with him at any great length about it but he said that he's not concerned because he's taken care of that problem in some other fashion.


--Jeff Moden
"RBAR is pronounced "ree-bar" and is a "Modenism" for "Row-By-Agonizing-Row".

First step towards the paradigm shift of writing Set Based code:
Stop thinking about what you want to do to a row... think, instead, of what you want to do to a column."

(play on words) "Just because you CAN do something in T-SQL, doesn't mean you SHOULDN'T." --22 Aug 2013

Helpful Links:
How to post code problems
How to post performance problems
Post #1518963
Posted Monday, December 2, 2013 1:18 PM


SSCrazy

SSCrazySSCrazySSCrazySSCrazySSCrazySSCrazySSCrazySSCrazy

Group: General Forum Members
Last Login: Today @ 6:11 AM
Points: 2,655, Visits: 6,017
Jeff thanks for checking into it. I'm curious how he handles that problem in other ways.

Thanks also to steve for his response as well.

-Luke.


To help us help you read this

For better help with performance problems please read this
Post #1519013
« Prev Topic | Next Topic »

Add to briefcase 12»»

Permissions Expand / Collapse