Use antivirus on all servers and computers

Milestone recommends that you deploy anti-virus software on all servers and computers that connect to the VMS. Malware that gets inside your system can lock, encrypt, or otherwise compromise data on the servers and other devices on the network.

If mobile devices connect to the VMS, this includes ensuring that the devices have the latest operating systems and patches (though not directly anti-virus) installed.

When you do virus scanning, do not scan recording server directories and subdirectories that contain recording databases. In addition, do not scan for viruses on archive storage directories. Scanning for viruses on these directories can impact system performance.

For information about the ports, directories, and subdirectories to exclude from the virus scan, see the section About virus scanning in the XProtect VMS - Administrator manual.

Learn more

The following control(s) provide additional guidance:

• NIST SP 800-53 PL-8 Information Security Architecture
• NIST SP 800-53 SI-2 Flaw remediation
• NIST SP 800-53 SI-3 Malicious Code Protection
• NIST SP 800-53 SI Information Systems Monitoring