AMON enabled or disabled for w2k3 servers?

Discussion in 'NOD32 version 2 Forum' started by sqlcoder, Jun 16, 2008.

Thread Status:
Not open for further replies.
  1. sqlcoder

    sqlcoder Registered Member

    Joined:
    Jun 16, 2008
    Posts:
    5
    Hello,

    I have several w2k3 server running nod32, amon is enabled. sometimes the shared folders to these servers are lost.

    Does AMON should be enabled or disabled for servers ? is there any help topic that explains this a little bit more?

    Thanks in advance
     
  2. ASpace

    ASpace Guest

    Hello!

    AMON is the file system monitoring in NOD32 . It performs scans on the files on-access , on-create and upon archive extract . It is the most imporant part of the protection so it should be enabled .

    IMON , however , must be disabled on servers because of the way it works - at Winsock level

    On servers I generally do the following changes :
    • add frequenly used or highly-network based programs to the AMON exclusions
    • change AMON settings so that only files with certain extensions are scanned
    • disable scanning network drives
    • IMON must be grayed out

    https://www.wilderssecurity.com/showpost.php?p=1227465&postcount=2


    You may find this useful:
    http://download1.eset.com/manuals/ra_ovw.pdf
     

    Attached Files:

  3. sqlcoder

    sqlcoder Registered Member

    Joined:
    Jun 16, 2008
    Posts:
    5
    HiTech_boy:

    Thanks for reply, very nice and clear explanation.
     
  4. ASpace

    ASpace Guest

    You are welcome ! :thumb:
     
  5. YeOldeStonecat

    YeOldeStonecat Registered Member

    Joined:
    Apr 25, 2005
    Posts:
    2,345
    Location:
    Along the Shorelines somewhere in New England
    For servers...you should have certain directories excluded by the real time protection of "any" brand AV product....such as the DHCP database, DNS, WINS, sysvol, etc.....

    Here's a list of exclusions for SBS....you can base your exclusions on this list...specific to Exchange or other server/DC/Infrastructure roles
    http://www.sbsfaq.com/Lists/FAQs/DispForm.aspx?ID=137
     
Thread Status:
Not open for further replies.