SQL Clone
SQLServerCentral is supported by Redgate
Log in  ::  Register  ::  Not logged in

Configuring Antivirus for SQL Servers

I've been on both sides of the debate with respect to whether or not to install antivirus software on a server running Microsoft SQL Server. If you decide to go down that route (or you are required to go down that road), here's the guidance you need to read:

Microsoft KB: Guidelines for choosing antivirus software to run on the computers that are running SQL Server

At a minimum, make sure you aren't scanning:

  • Files with the standard SQL Server extensions: .mdf, .ndf, .ldf
  • File with the standard SQL Server backup extensions: .bak, .trn
  • Directories where Full Text is writing to.

I would also include:

  • I would include the LOG directory for the SQL Server install.
  • Files corresponding to 3rd party backup extensions (like .sqb for SQL Backup).

There is also guidance for Analysis Services and for SQL Servers installed on clusters.



K. Brian Kelley - Databases, Infrastructure, and Security

IT Security, MySQL, Perl, SQL Server, and Windows technologies.


Posted by David.Poole on 24 February 2011

I would add in FILESTREAM locations.

Any location where logging is performed.  Don't forget SSIS

Anywhere that replication uses such as snapshot locations, pre-post scripts.

Posted by Dukagjin Maloku on 24 February 2011

This is good tip and very nice information for all DBAs!

Thanks for sharing!

Leave a Comment

Please register or log in to leave a comment.