I don't have a z/OS solution for you, but I do use CLAMAV on my zLinux webservers. It is not an efficient solution. It takes a lot of CPU and I/O. If I had to do it over again, I would engineer an x86 staging server to do ALL the Anti-Virus scanning as files are placed there for migration to the public site. Only web content providers would be allowed to put stuff there. It would be scanned and if clean migrated to the appropriate production server in the correct subdirectories. The operating system components and applications code would be scanned on the maintenance server before being migrated into production.
I would argue that with such an auditable process with anti-virus steps, I do not need an anti-virus program on my production zLinux servers. /Tom Kern /301-903-2211 /Contractor to US Dept of Energy On Fri, 28 Jan 2011 12:27:54 -0600, Jim Marshall <[email protected]> wrote: >Auditors came around and wrote up our z/OS V1R10 Sysplex for not running a >Virus Checker. Anyone has a constructive solution as to one being available or >some verbage which defends the position. > >Been hunting around for a Virus Checker for zLinux. Also interested in what >kind of over head it might use. > >thanks jim ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
