Re: MS Defender for OL7 Oracle DB servers

From: Tim Gorman <tim.evdbt_at_gmail.com>
Date: Fri, 4 Mar 2022 07:29:02 -0800
Message-ID: <467b8794-08b1-cea4-2d35-e2276fff698f_at_gmail.com>

Rich,

As documented HERE
<https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/microsoft-defender-endpoint-linux?view=o365-worldwide#common-applications-to-microsoft-defender-for-endpoint-can-impact>...

    /*Common Applications to Microsoft Defender for Endpoint can impact*//
    ////
    //High I/O workloads from certain applications can experience

    performance issues when Microsoft Defender for Endpoint is     installed. These include applications for developer scenarios like     Jenkins and Jira, and database workloads like OracleDB and Postgres.     If experiencing performance degradation, consider setting exclusions     for trusted applications, keeping //Common Exclusion Mistakes for     Microsoft Defender Antivirus
    <https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/common-exclusion-mistakes-microsoft-defender-antivirus>//in     mind. For additional guidance, consider consulting documentation     regarding antivirus exclusions from third party applications./

Personally, I think any sort of "protective" software running on a database server is another good reason to use Oracle ASM, as A/V software generally "protects" only filesystem-based files, and do not recognize (or bother with) block-special or character-special devices.  Just my opinion, when you can't prevent A/V software from being used in the first place.

Hope this helps...

Thanks!

-Tim

On 3/4/2022 6:50 AM, Rich J wrote:
> Hey all,
>
> Anyone run into any issues running MS Defender on their Oracle DB
> servers on Linux?  This would be on OL7 for now (mostly 7.7).
>
> One would think that the Oracle datafile directories plus the ADR tree
> should be excluded.  I'm just wondering if there's other common
> "gotchas" that others have run into.
>
> Thanks,
> Rich

--
http://www.freelists.org/webpage/oracle-l

Received on Fri Mar 04 2022 - 16:29:02 CET