You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by André Warnier <aw...@ice-sa.com> on 2014/07/02 09:33:42 UTC
Re: [somewhat OT] Apache Tomcat7 service start randomly after the
installation of McAfee antivirus.
Blachon, Philippe wrote:
> Good morning,
>
> We have 4 identical servers with a scheduled task running every night on each of them. This task Stop Tomcat -> Update some data -> Start Tomcat.
> This worked fine for months.
> We have installed a new antivirus McAfee 3 weeks ago. Now the Tomcat7 service starts randomly. At least 1 of the 4 server needs a manual start of the Tomcat7 service every morning.
>
> Do you know if there is specifics problems between Tomcat and Mc Afee ?
> We have already tried to exclude Tomcat.exe from McAfee scanning. Is there other thing we could exclude without compromising the security ?
>
> Configuration:
> Windows server 2008 R2 Standard - SP1
> Apache Tomcat 7.0.29 Server
> McAffee Agent 4.8.0.1500
> Mcafee VirusScan Enterprise 8.8.04001
>
> Thanks, have a nice day,
> Philippe Blachon.
>
Not a direct answer to your question, but maybe a bit of lateral and logical thinking here :
Why would one run a virus scanner permanently on a Tomcat server ?
And why run it on most of the disk space, as opposed to just the few directories where
some client /might/ upload external files ?
Do the applications even allow clients to put files on that server ?
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: [somewhat OT] Apache Tomcat7 service start randomly after the
installation of McAfee antivirus.
Posted by Christopher Schultz <ch...@christopherschultz.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
André,
On 7/2/14, 3:33 AM, André Warnier wrote:
> Blachon, Philippe wrote:
>> Good morning,
>>
>> We have 4 identical servers with a scheduled task running every
>> night on each of them. This task Stop Tomcat -> Update some data
>> -> Start Tomcat. This worked fine for months. We have installed a
>> new antivirus McAfee 3 weeks ago. Now the Tomcat7 service starts
>> randomly. At least 1 of the 4 server needs a manual start of the
>> Tomcat7 service every morning.
>>
>> Do you know if there is specifics problems between Tomcat and Mc
>> Afee ? We have already tried to exclude Tomcat.exe from McAfee
>> scanning. Is there other thing we could exclude without
>> compromising the security ?
>>
>> Configuration: Windows server 2008 R2 Standard - SP1 Apache
>> Tomcat 7.0.29 Server McAffee Agent 4.8.0.1500 Mcafee VirusScan
>> Enterprise 8.8.04001
>>
>> Thanks, have a nice day, Philippe Blachon.
>>
>
> Not a direct answer to your question, but maybe a bit of lateral
> and logical thinking here :
>
> Why would one run a virus scanner permanently on a Tomcat server ?
> And why run it on most of the disk space, as opposed to just the
> few directories where some client /might/ upload external files ?
> Do the applications even allow clients to put files on that server
> ?
As someone who has to meet certain government-mandated regulations, I
can commiserate with the OP: sometimes you have to do stupid crap just
so somebody doesn't say "why aren't you following industry-standard
guidelines?"
The good news is that "use anti-virus and anti-malware" can be
interpreted in ... liberal ways.
- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/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=nGv9
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: [somewhat OT] Apache Tomcat7 service start randomly after the
installation of McAfee antivirus.
Posted by André Warnier <aw...@ice-sa.com>.
Leo Donahue wrote:
> On Wed, Jul 2, 2014 at 2:33 AM, André Warnier <aw...@ice-sa.com> wrote:
>
>> Blachon, Philippe wrote:
>>
>>> Good morning,
>>>
>>> We have 4 identical servers with a scheduled task running every night on
>>> each of them. This task Stop Tomcat -> Update some data -> Start Tomcat.
>>> This worked fine for months.
>>> We have installed a new antivirus McAfee 3 weeks ago. Now the Tomcat7
>>> service starts randomly. At least 1 of the 4 server needs a manual start of
>>> the Tomcat7 service every morning.
>>>
>>> Do you know if there is specifics problems between Tomcat and Mc Afee ?
>>> We have already tried to exclude Tomcat.exe from McAfee scanning. Is
>>> there other thing we could exclude without compromising the security ?
>>>
>>> Configuration:
>>> Windows server 2008 R2 Standard - SP1
>>> Apache Tomcat 7.0.29 Server
>>> McAffee Agent 4.8.0.1500
>>> Mcafee VirusScan Enterprise 8.8.04001
>>>
>>> Thanks, have a nice day,
>>> Philippe Blachon.
>>>
>>>
>> Not a direct answer to your question, but maybe a bit of lateral and
>> logical thinking here :
>>
>> Why would one run a virus scanner permanently on a Tomcat server ?
>>
>
> Does the OP work in the government? My former employer had virus scanning
> software on every server. You couldn't get a server image without it.
>
> The answer to that question is really based on policy, if he works in
> government. Eventually, that server has the potential for getting a virus
> somehow from something or someone, and someone has to answer the question:
> "why wasn't there virus scanning software on the server?"
>
Leo, I understand what you're saying above.
But if one extrapolates that logic, then at some point the whole IT infrastructure and the
whole Internet would grind to a halt, as only the POTUS would be allowed to upload
anything onto a computer.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: [somewhat OT] Apache Tomcat7 service start randomly after the
installation of McAfee antivirus.
Posted by Leo Donahue <do...@gmail.com>.
On Wed, Jul 2, 2014 at 2:33 AM, André Warnier <aw...@ice-sa.com> wrote:
> Blachon, Philippe wrote:
>
>> Good morning,
>>
>> We have 4 identical servers with a scheduled task running every night on
>> each of them. This task Stop Tomcat -> Update some data -> Start Tomcat.
>> This worked fine for months.
>> We have installed a new antivirus McAfee 3 weeks ago. Now the Tomcat7
>> service starts randomly. At least 1 of the 4 server needs a manual start of
>> the Tomcat7 service every morning.
>>
>> Do you know if there is specifics problems between Tomcat and Mc Afee ?
>> We have already tried to exclude Tomcat.exe from McAfee scanning. Is
>> there other thing we could exclude without compromising the security ?
>>
>> Configuration:
>> Windows server 2008 R2 Standard - SP1
>> Apache Tomcat 7.0.29 Server
>> McAffee Agent 4.8.0.1500
>> Mcafee VirusScan Enterprise 8.8.04001
>>
>> Thanks, have a nice day,
>> Philippe Blachon.
>>
>>
> Not a direct answer to your question, but maybe a bit of lateral and
> logical thinking here :
>
> Why would one run a virus scanner permanently on a Tomcat server ?
>
Does the OP work in the government? My former employer had virus scanning
software on every server. You couldn't get a server image without it.
The answer to that question is really based on policy, if he works in
government. Eventually, that server has the potential for getting a virus
somehow from something or someone, and someone has to answer the question:
"why wasn't there virus scanning software on the server?"
Leo