AMON enabled or disabled for w2k3 servers?

Hello,

I have several w2k3 server running nod32, amon is enabled. sometimes the shared folders to these servers are lost.

Does AMON should be enabled or disabled for servers ? is there any help topic that explains this a little bit more?

Thanks in advance

 

Hello!

AMON is the file system monitoring in NOD32 . It performs scans on the files on-access , on-create and upon archive extract . It is the most imporant part of the protection so it should be enabled .

IMON , however , must be disabled on servers because of the way it works - at Winsock level

On servers I generally do the following changes :

• add frequenly used or highly-network based programs to the AMON exclusions
• change AMON settings so that only files with certain extensions are scanned
• disable scanning network drives
• IMON must be grayed out

https://www.wilderssecurity.com/showpost.php?p=1227465&postcount=2


You may find this useful:
http://download1.eset.com/manuals/ra_ovw.pdf

 

HiTech_boy:

Thanks for reply, very nice and clear explanation.

 

You are welcome !

 

For servers...you should have certain directories excluded by the real time protection of "any" brand AV product....such as the DHCP database, DNS, WINS, sysvol, etc.....

Here's a list of exclusions for SBS....you can base your exclusions on this list...specific to Exchange or other server/DC/Infrastructure roles
http://www.sbsfaq.com/Lists/FAQs/DispForm.aspx?ID=137