SQL Clone
SQLServerCentral is supported by Redgate
 
Log in  ::  Register  ::  Not logged in
 
 
 


Antivirus on large SQL Server instances


Antivirus on large SQL Server instances

Author
Message
Luke L
Luke L
Hall of Fame
Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)

Group: General Forum Members
Points: 3934 Visits: 6127
All, I'm having an issue where my current antivirus vendor is having issues when scanning my larger sql server machines. These are servers with large amounts of memory 256 GB with >115 GB in use. It appears that when the scan begins to scan the memory, prior to scanning the files, it chokes when it sees all of that memory in use. This causes significant resource contention including timeouts when connecting to SQL Server. We've already contacted the vendor for an enhancement request, but it seems they are unlikely to act on it quickly.

Is anyone else out there running machines with large amounts of memory with large amounts in use and running antivirus. If so what are you running and how is it performing for you? I'm about to deploy machines with even more memory and I'm concerned this issue will continue, and I'm looking for other alternatives. Local policies state I need to have AV installed and scanning daily (so uninstalling isn't an option), I'm just looking for one that will work with my current systems.

Thanks,
-Luke.

To help us help you read this

For better help with performance problems please read this
PravB4u
PravB4u
SSC-Enthusiastic
SSC-Enthusiastic (189 reputation)SSC-Enthusiastic (189 reputation)SSC-Enthusiastic (189 reputation)SSC-Enthusiastic (189 reputation)SSC-Enthusiastic (189 reputation)SSC-Enthusiastic (189 reputation)SSC-Enthusiastic (189 reputation)SSC-Enthusiastic (189 reputation)

Group: General Forum Members
Points: 189 Visits: 603
Hi,
in our environment we have excluded mdf,ldf,ndf files from antivirus scanning.



Praveen D'sa
MCITP - Database Administrator 2008
http://sqlerrors.wordpress.com
Luke L
Luke L
Hall of Fame
Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)

Group: General Forum Members
Points: 3934 Visits: 6127
Yes, we do that as well. It is a failing of the product. Not the way it is configured. I'm looking for what av products other people are using on sql servers with large amounts of memory.

Thanks.
Luke.

To help us help you read this

For better help with performance problems please read this
Jeff Moden
Jeff Moden
SSC Guru
SSC Guru (85K reputation)SSC Guru (85K reputation)SSC Guru (85K reputation)SSC Guru (85K reputation)SSC Guru (85K reputation)SSC Guru (85K reputation)SSC Guru (85K reputation)SSC Guru (85K reputation)

Group: General Forum Members
Points: 85128 Visits: 41077
I don't have an answer right now but I have a friend that works with servers that half a half TByte and more. I know he's running some form of AV on them. I'll try to remember to ask him tomorrow.

--Jeff Moden

RBAR is pronounced ree-bar and is a Modenism for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
Stop thinking about what you want to do to a row... think, instead, of what you want to do to a column.
If you think its expensive to hire a professional to do the job, wait until you hire an amateur. -- Red Adair

Helpful Links:
How to post code problems
How to post performance problems
Forum FAQs
Luke L
Luke L
Hall of Fame
Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)

Group: General Forum Members
Points: 3934 Visits: 6127
Thanks Jeff! We're looking at upgrading to systems in that neighborhood and want to get this resolved prior to putting them into production.
Luke.

To help us help you read this

For better help with performance problems please read this
liteswitch
liteswitch
SSC-Enthusiastic
SSC-Enthusiastic (168 reputation)SSC-Enthusiastic (168 reputation)SSC-Enthusiastic (168 reputation)SSC-Enthusiastic (168 reputation)SSC-Enthusiastic (168 reputation)SSC-Enthusiastic (168 reputation)SSC-Enthusiastic (168 reputation)SSC-Enthusiastic (168 reputation)

Group: General Forum Members
Points: 168 Visits: 598
We use A/V on our servers and a lot of our production SQL Servers have anything from 256GB to 1TB of memory. As well as setting the file exclusions as stated above, we also configured the A/V not to scan the sqlserver.exe service/process or any spawned child processes, and that seems to work fine.
Luke L
Luke L
Hall of Fame
Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)

Group: General Forum Members
Points: 3934 Visits: 6127
I believe the SQLSERVER.exe process is excluded as well. I'm uncertain if we have the option to exclude all spawned processes, but I'll check.

Can you tell me which AV you are using? If you would rather not post it publicly please send me a private message.

Thanks,
-Luke.

To help us help you read this

For better help with performance problems please read this
Steve-3_5_7_9
Steve-3_5_7_9
UDP Broadcaster
UDP Broadcaster (1.4K reputation)UDP Broadcaster (1.4K reputation)UDP Broadcaster (1.4K reputation)UDP Broadcaster (1.4K reputation)UDP Broadcaster (1.4K reputation)UDP Broadcaster (1.4K reputation)UDP Broadcaster (1.4K reputation)UDP Broadcaster (1.4K reputation)

Group: General Forum Members
Points: 1442 Visits: 1599
McAfee Enterprise runs fine on our servers.

512 GB of RAM

We use the exclusions mentioned above and do not have contention with the memory scan.

Steve



Jeff Moden
Jeff Moden
SSC Guru
SSC Guru (85K reputation)SSC Guru (85K reputation)SSC Guru (85K reputation)SSC Guru (85K reputation)SSC Guru (85K reputation)SSC Guru (85K reputation)SSC Guru (85K reputation)SSC Guru (85K reputation)

Group: General Forum Members
Points: 85128 Visits: 41077
Luke L (12/1/2013)
Thanks Jeff! We're looking at upgrading to systems in that neighborhood and want to get this resolved prior to putting them into production.
Luke.


Wow! I talked with that DBA (he has literally dozens of multi-terrabyte databases on his servers and, as I said before, a half Tbyte of memory or more on those servers) and he doesn't run any form of anti-virus on them. I didn't have the time to talk with him at any great length about it but he said that he's not concerned because he's taken care of that problem in some other fashion.

--Jeff Moden

RBAR is pronounced ree-bar and is a Modenism for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
Stop thinking about what you want to do to a row... think, instead, of what you want to do to a column.
If you think its expensive to hire a professional to do the job, wait until you hire an amateur. -- Red Adair

Helpful Links:
How to post code problems
How to post performance problems
Forum FAQs
Luke L
Luke L
Hall of Fame
Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)Hall of Fame (3.9K reputation)

Group: General Forum Members
Points: 3934 Visits: 6127
Jeff thanks for checking into it. I'm curious how he handles that problem in other ways.

Thanks also to steve for his response as well.

-Luke.

To help us help you read this

For better help with performance problems please read this
Go


Permissions

You can't post new topics.
You can't post topic replies.
You can't post new polls.
You can't post replies to polls.
You can't edit your own topics.
You can't delete your own topics.
You can't edit other topics.
You can't delete other topics.
You can't edit your own posts.
You can't edit other posts.
You can't delete your own posts.
You can't delete other posts.
You can't post events.
You can't edit your own events.
You can't edit other events.
You can't delete your own events.
You can't delete other events.
You can't send private messages.
You can't send emails.
You can read topics.
You can't vote in polls.
You can't upload attachments.
You can download attachments.
You can't post HTML code.
You can't edit HTML code.
You can't post IFCode.
You can't post JavaScript.
You can post emoticons.
You can't post or upload images.

Select a forum

































































































































































SQLServerCentral


Search