Anti-Virus Best practices for Domino

For AV in a Domino environment, if you’ve got a 3rd party MTA at the gateway that basically provides anti-spam and AV for all incoming/outgoing mail is there a reason to run AV on internal Domino Messaging and Enterprise servers?

Subject: Any other areas compromised ?

That only sorts out a virus from the internet / via that gateway if it is a central routing hub.

I think the recommended option would be…

  1. run an operating system virus scanner, but don’t scan the domino files.

  2. run an active Domino level scanner on all routers

  3. run a scheduled Domino scan on 1 replica of each database every time a new virus pattern file is available.

Generally, something gives when you have performance issues and sometimes this is the virus scanner as its 3rd party to Domino.

We use 1 virus vendor at the SMTP Gateway and on PCs / Laptops, plus another vendor in Domino.

What about an operating system virus introduced by a non-email server on the network ?

Do you have an anti-virus product running on your Mobile devices to prevent intrusion ?

Are your Virus Scanner settings locked out to users, so they cannot disable them ?

Do your remote users work on machines that are not covered by a virus scanner and locked policy to prevent upload or replication from offline databases ?

What if a new Virus is not recognized at the gateway and you are not re-running the latest pattern file against the document now in an internal database being sent internally ?