WebALARM compatibility with antivirus software that installed in the same machine - related FAQ

WebALARM compatibility with antivirus software that installed in the same machine - related FAQ

Question(s) and Answer(s):

 

Q1: Will there be a problem installing WebALARM (Linux version) to monitor files changes on a server that already have virus scanner software running? (Especially in regards of files being deleted and quarantined by the antivirus software, that might be restored by WebALARM)

 

A: We have had many installations in various types of environment. So far, we are not aware or receive any reports of incompatibility with antivirus software. During initial setup, WebALARM is normally used to monitor and protect folders or files that are known to be good. Unless antivirus is installed AFTER WebALARM and malware is accidentally added for WebALARM protection, the described situation is unlikely.

 

Q2: Is there any track record of WebALARM being implemented on a server that have antivirus scanner installed?

For example, Trend Micro ServerProtect for Linux or Symantec EndPoint?

 

A: Yes, we have experienced WebALARM installations on servers with Trend Micro ServerProtect and Symantec End Point running. However, we have no record of the exact version numbers. We are happy to extend trial for customer to do POC and ensure everything is running smoothly before production use.

 

Q3: If it is possible for WebALARM to be implemented together with antivirus scanner software, is there any consideration need be given when doing the design?

 

A: The antivirus software should be installed, configured and running to ensure system is clean before installing WebALARM.

WebALARM can be initially configured to perform monitoring with without recovery. After a specific monitoring period and operation is stable, activate recovery mode for WebALARM.

 

More information:

N/A

    • Related Articles

    • Is WebALARM compatible with antivirus software?

      Question(s) and Answer(s): Q1: Does WebALARM support coexistence with the anti-virus software? A: We have had many installations in various types of environment. So far, we are not aware or receive any reports of WebALARM incompatibility with ...

    • WAA - Tampered file related FAQ

      Customer Environment: OS for WebALARM Agent (WAA): Linux   Question(s) & Answer(s):   Q1: What is the directory for tampered file in WA(Linux)? A: "/usr/local/wa4/wa.err/" Q2: Does the tampered file format would be changed once it is copied into the ...

    • [WebALARM]: What is the information security standard for WebALARM?

      Question: What is the information security standard for WebALARM? Answer: WebALARM is PCI DSS compliant to clauses 10.5.5 and 11.5. * PCI DSS (Payment Card Industry Data Security ...

    • [WebAlarm] WebAlarm versions that support SSLv3 and TLSv1.0

      Question/Answer: 1) Does WebALarm v4.3.1 support SSLv3 or it has been completely removed and replacing by TLSv.1? Answer: WA v4.3.1 still supports both SSLv3 and TLSv1.0. 2) Which WA version that use TLS protocol and completely remove previous SSLv3 ...

    • [WebALARM] How to renew license, migrate, backup, restore, upgrade and uninstall WebALARM?

      1.    Renewing License Procedures 1.1   WebALARM Agent  Red Hat Enterprise Linux v6 1.      Copy the new wa.p12 license file to /usr/local/wa4/ 2.      Type ‘/sbin/initctl stop wa’ to stop the WebALARM Agent process 3.      Type ‘/sbin/initctl start ...