TRITECH SOFTWARE SYSTEMS -2015 - Laserfiche WebLink

Home Browse Search

Chapter 3 - System Components 20.3.1 PLATFORM SPECIFIC RECOMMENDATIONS 1. For all Windows OS -based equipment in your system, please follow the Microsoft guidelines which can be found at http://support.m'icrosoft.com/l(b/822158. 2. For all servers twining Microsoft SQL Server, please follow the recommendations in the Microsoft article "Guidelines for choosing antivirus software to nrn on the computers that are running SQL Server" at http://support.microsoft.com/kb/309422. 3. For customers using Areserve RHA (an CA software application), CA recommends that the "%winddir%\CASpool" (folder and all of the folders or files that are being synchronized by Areserve must be excluded from active and scheduled virus scans. This includes the TriTech file structure on the server. 4. If your system uses Microsoft Cluster Server, please consult with your Virus Protection software vendor to determine its compatibility with Cluster services. Because Virus Protection software drivers reside above the file system, they may not properly address the nuances related to a clustered environment. For more information on this topic, please refer to: http://support.microsoft.com/Icb/250355. 5. If you use Microsoft Access for reporting, do not scan these database files while in use as they too can be corrupted by active virus scanning. For more information see Symantec Document ID: 2002091913503748 on their website. 6. Customers utilizing VMWare products should consult the VMWare best practices for additional Antivirus and Security. For more information see VMWare websites: http://kb.mit.edu/confluence/dis lalay/istcontrib/VMware+Security+Recommendations+and+Best+Practices http://www,vmware.com/files/pdf/VMware-View-AntiV irusPractices-TN-EN.pdf 20.3.2 GENERAL VIRUS PROTECTION RECOMMENDATIONS 1. The frequency for Virus Definition file updates should be configured to run daily. Virus Definition files are essentially databases that hold information pertaining to viruses. The updating of both the Virus' Definition files and the Virus Scan engine should be permitted. This is considered a best practice. 2. Machines should scan only their local drives (not network drives); therefore, do not set active or scheduled scanning of the Inform CAD Q: drive other than the server hosting the file share. 3. Virus Protection software needs to be disabled when software updates occur, whether the updates are from Microsoft, TriTech, or any other software vendor. This will prevent file locking problems from occurring and is considered a best practice. 4. Port activities within the Virus Protection software have to be managed, for example, you would want to allow VNC packets to be sent and received without each packet being scanned. Disrupting VNC packets could impede the VNC application and slow the network. 5. The implementation and management of Virus Protection software requires regular monitoring of security related websites for the purpose of staying informed on virus threat's, technical tips, and security related advisories. Please monitor your Virus Protection software provider's site. Other reference sites include the following: a, http://us.mcafee.com/virusInfo/default.asp b. http://www.sare.com c. http://www.cert.org 6. Other management activities include the regular review of Virus Scan log files for each computer, which contain statistical information about the scanning activities on that machine. 7. Another important consideration is the implementation and management of Firewall and IP Ports. Many security breaches can be prevented through effective IP Port management, for example, IP Ports should be closed except for the ones being used, Often this is not the case, as many systems are vulnerable because most IP Ports are open. Please refer to the firewall port recommendations earlier in this document for configuration settings needed for this product. The contents of this material are confidential and proprietary to TriTech Software Systems, Inc. and may not be reproduced, published or disclosed to others without the prior written consent of TriTech Software Systems, Inc. ©2015 TriTech Software Systems