Any connected server is at some risk of infection. The highest-risk servers usually meet one or more of the following criteria:
Servers are accessible via the public internet
Servers are accessible from an open connection that is not managed by a firewall
Servers can access and run files on other servers.
Anti-virus Types
Endpoint protection typically protects against malware and viruses across multiple devices and operating systems.
Active virus scanning or Endpoint protection software can cause the following issues in ArcGIS Enterprise components:
It may slow down or prevent the installation, configuration, and update processes of ArcGIS software.
It may slow down or prevent the creation or restoration of backups.
May slow down or prevent tile rendering in map or scene services.
To fix these issues, you can relax your security level. However, this can put the system at risk. You must strike this balance based on your performance and security expectations.
Virus Scanning software scans existing files for file infections. It detects files after they have been infected. Virus scans typically run on a set schedule.
Virus Scanning can create the following issues in ArcGIS Enterprise components
If the virus scanner has opened a database file and it is still open when it tries to open the ArcGIS Enterprise database, the database to which the file belongs may be marked as suspicious.
If software components or temporary files created by the software are similar to heuristics of known malware variants, a virus scan could potentially yield false results.
Web Application Firewall
A WAF, or Web Application Firewall, helps protect web applications and application servers by filtering and monitoring HTTP traffic between a server and the Internet. A WAF inspects HTTP traffic before it reaches your server and filters out threats that could harm your site’s personalize your marketing functionality or compromise data. Placing a WAF in front of a web application server acts as a shield between the web application and the Internet. Many WAFs can protect against attacks such as Malicious File Execution, a malicious technique that allows a user to remotely execute code after accepting a malicious file.
When should ArcGIS Enterprise files and directories be excluded from virus scanning?
Backup and Restore Operations
You can create backups of your the russian archaeologists discovered ArcGIS Enterprise deployment and restore the latest backup in the event of a failure or corruption. This allows you to recover portal elements, services, and data that existed when you created the backup.
Use the webgisdr utility to export text services backup files of ArcGIS Enterprise components. With this tool, you can back up the following contents:
Portal elements and settings
GIS services and settings
Relational data store and tile cache data store
When the backup or restore process starts, active antivirus scanners will scan the created files. These files will be created in the %temp% directory or the specified backup/restore directory. This scanning process will extend the writing process, so the backup/restore processes will take time to complete.