VMware Cloud Community
GreenIT
Enthusiast
Enthusiast

Do VM's need an anti virus

If the host machine is running windows server 2003 and Symantec, do the VM's need seperate symantec antivirus?

Thanks

0 Kudos
7 Replies
Dave_Mishchenko
Immortal
Immortal

Your post has been moved to the Security and Compliance forum

Dave Mishchenko

VMware Communities User Moderator

0 Kudos
weinstein5
Immortal
Immortal

Ye sthey do - each VM whether running in ESX, VMware Server, or Worksastion should have some form of anti-virus protection particulalry if oging to be used for any production - anti-virus installed into the host machine will not protect the VM

If you find this or any other answer useful please consider awarding points by marking the answer correct or helpful
0 Kudos
AWo
Immortal
Immortal

Yes, a virtualized machine faces the same threads as a physical one regarding viruses.

At VMworld 2007 was an announcement to put the virus protection onto ESX host to protect all guests.

AWo

vExpert 2009/10/11 [:o]===[o:] [: ]o=o[ :] = Save forests! rent firewood! =
0 Kudos
Texiwill
Leadership
Leadership

Hello,

Unfortunately until a VMsafe Antivirus product is available, you need to run AV in every guest. If you run it on the host you will get major performance issues as well as a ton of false positives. Also you want to stagger your full disk scans so that they do not run simultaneously across your VMs else that will also cause severe performance problems.


Best regards,

Edward L. Haletky

VMware Communities User Moderator

====

Author of the book 'VMWare ESX Server in the Enterprise: Planning and Securing Virtualization Servers', Copyright 2008 Pearson Education. As well as the Virtualization Wiki at http://www.astroarch.com/wiki/index.php/Virtualization

--
Edward L. Haletky
vExpert XIV: 2009-2023,
VMTN Community Moderator
vSphere Upgrade Saga: https://www.astroarch.com/blogs
GitHub Repo: https://github.com/Texiwill
0 Kudos
TomHowarth
Leadership
Leadership

yes, a VM is to all respects and purposes the same as a phyiscal machine. you would not leave unprotected phyiscal machines on the network, just because you had install AV on a machine. these machines should be treated as you would a physical one. however remember to stagger your AV scans as these are very CPU intensive and could bring your host to its knees if not carefully managed.

Tom Howarth

VMware Communities User Moderator

Tom Howarth VCP / VCAP / vExpert
VMware Communities User Moderator
Blog: http://www.planetvm.net
Contributing author on VMware vSphere and Virtual Infrastructure Security: Securing ESX and the Virtual Environment
Contributing author on VCP VMware Certified Professional on VSphere 4 Study Guide: Exam VCP-410
0 Kudos
williamarrata
Expert
Expert

TrendMicro and Symantic have very good products that work very well with ESX and VM machines. Take a look and do your due diligence to see what product might fit you best.

Hope that helped. Smiley Happy

Hope that helped. 🙂
0 Kudos
azn2kew
Champion
Champion

You can also use ClamAV as your antivirus solution read here more details

If you found this information useful, please consider awarding points for "Correct" or "Helpful". Thanks!!!

Regards,

Stefan Nguyen

iGeek Systems Inc.

VMware, Citrix, Microsoft Consultant

If you found this information useful, please consider awarding points for "Correct" or "Helpful". Thanks!!! Regards, Stefan Nguyen VMware vExpert 2009 iGeek Systems Inc. VMware vExpert, VCP 3 & 4, VSP, VTSP, CCA, CCEA, CCNA, MCSA, EMCSE, EMCISA
0 Kudos