Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (nike.apache.org: domain of donahulf2@gmail.com designates
 209.85.219.47 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <53B3B5D6.6060802@ice-sa.com>
References: 
 <2D0B270554D24E40B6E88F10589154860149365B91EB@MAIL-MBX.cwr.wto.org>
	<53B3B5D6.6060802@ice-sa.com>
Date: Wed, 2 Jul 2014 22:28:36 -0500
Message-ID: 
 <CA+EUcEMrSjJ7UkYt7+Be0nN3BZ5P852ZNU=ht5tx2zvY3nCAjw@mail.gmail.com>
Subject: Re: [somewhat OT] Apache Tomcat7 service start randomly after the
 installation of McAfee antivirus.
From: Leo Donahue <donahulf2@gmail.com>
To: Tomcat Users List <users@tomcat.apache.org>
Content-Type: multipart/alternative; boundary=e89a8fb1f39eb2b95504fd419a10

--e89a8fb1f39eb2b95504fd419a10
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On Wed, Jul 2, 2014 at 2:33 AM, Andr=C3=A9 Warnier <aw@ice-sa.com> wrote:

> Blachon, Philippe wrote:
>
>> Good morning,
>>
>> We have 4 identical servers with a scheduled task running every night on
>> each of them. This task Stop Tomcat -> Update some data -> Start Tomcat.
>> This worked fine for months.
>> We have installed a new antivirus McAfee 3 weeks ago. Now the Tomcat7
>> service starts randomly. At least 1 of the 4 server needs a manual start=
 of
>> the Tomcat7 service every morning.
>>
>> Do you know if there is specifics problems between Tomcat and Mc Afee ?
>> We have already tried to exclude Tomcat.exe from McAfee scanning. Is
>> there other thing we could exclude without compromising the security ?
>>
>> Configuration:
>> Windows server 2008 R2 Standard - SP1
>> Apache Tomcat 7.0.29 Server
>> McAffee Agent 4.8.0.1500
>> Mcafee VirusScan Enterprise 8.8.04001
>>
>> Thanks, have a nice day,
>> Philippe Blachon.
>>
>>
> Not a direct answer to your question, but maybe a bit of lateral and
> logical thinking here :
>
> Why would one run a virus scanner permanently on a Tomcat server ?
>

Does the OP work in the government?  My former employer had virus scanning
software on every server.  You couldn't get a server image without it.

The answer to that question is really based on policy, if he works in
government.  Eventually, that server has the potential for getting a virus
somehow from something or someone, and someone has to answer the question:
"why wasn't there virus scanning software on the server?"

Leo

--e89a8fb1f39eb2b95504fd419a10--