Kaspersky Anti-Virus 6.0 for Windows Servers Enterprise Edition MP2 (builds 6.0.2. [551-555])

	Useful links
	Methods how to install Kaspersky Anti-Virus 6.0 for Windows Servers Enterprise Edition Guidelines for choosing antivirus software to run on the computers that are running SQL Server Adding exclusions from Anti-Virus scan via Trusted zone

Yes, it can. Kaspersky Anti-Virus 6.0 for Windows Servers Enterprise Edition can be installed to a cluster server (Microsoft Server Cluster). Two installation modes are supported Active/Active and Active/Passive.

Kaspersky Anti-Virus 6.0 for Windows Servers Enterprise Edition is a «non-cluster-aware» application, i.e. before the installation there is no need to stop the whole cluster. It is recommended to stop the cluster software before the installation; if it is impossible limit the load on the cluster resources.

Kaspersky Anti-Virus 6.0 for Windows Servers Enterprise Edition can be installed on the server cluster running under the following OS’s: 

• Microsoft Windows 2000 Advanced Server (Service Pack 4 + Update Rollup 1) 
• Microsoft Windows Server 2003 Enterprise Edition (Service Pack 1) and above 
• Microsoft Windows Server 2003 Datacenter Edition (Service Pack 1) and above 
• Microsoft Windows Server 2003 Enterprise Edition R2 (Service Pack 1) and above 
• Microsoft Windows Server 2003 Datacenter Edition R2 (Service Pack 1) and above 
• Microsoft Windows Server 2008 Standard Edition 
• Microsoft Windows Server 2008 Enterprise Edition 
• Microsoft Windows Server 2008 Datacenter Edition 
• Microsoft Windows Server 2003 x64 Enterprise Edition (Service Pack 1) and above 
• Microsoft Windows Server 2003 x64 Datacenter Edition (Service Pack 1) and above
• Microsoft Windows Server 2003 x64 Enterprise Edition R2 (Service Pack 1) and above 
• Microsoft Windows Server 2003 x64 Datacenter Edition R2 (Service Pack 1) and above

Do not install Kaspersky Anti-Virus 6.0 for Windows Servers Enterprise Edition to cluster discs. Otherwise at some period of time only one cluster node will be protected – the one which owns the cluster disc.

INSTALLATION

In series, perform the following steps for each cluster node:

1. Break the cluster by bringing down one of the nodes.

1. 1. Use the application Cluster Administrator, stop Cluster Service on this cluster node.

1. 2. Let «failover» complete.

2. Install the Anti-Virus to the downed node.

If Cluster Service has not been installed on this node, clear the box Automatically enable real-time protection in the Setup Wizard of the Anti-Virus. If you run the installation in the silent mode, use the key of the command /RUNRTP=0.
Otherwise after installation of Kaspersky Anti-Virus and start of real-time protection, cluster may freeze, as the anti-virus application will intercept access to quorum resource and to %systemroot%\Cluster.

3. Restart the node:

3. 1. Use the application Cluster Administrator, start Cluster Service on this cluster node

3. 2. Let «failover» complete.

GENERAL RECOMMENDATINS AND PECULIARATIES 

• To prevent cluster from freezing it is recommended to add to the Trusted zone exclusion rules from scan for cluster quorum disc (usually marked by the letter Q:) and folders with the Cluster logs C:\Windows\Cluster. The rules should apply to the Real-time file protection task. It should be done on every cluster node on which Kaspersky Anti-Virus 6.0 for Windows Servers Enterprise Edition is installed. 

• Do not use as paths for quarantine and the backup folders which reside on the cluster discs. Otherwise at any moment only one Anti-Virus would have access to the storages - the one which has this cluster disc.

Also do not use network variables which link to the folders on the cluster discs. 

• When installing remotely via the remote install task in Kaspersky Administration Kit use local names of the servers which is a node-server instead of the shared cluster name. 

• All events and notifications generated by the Anti-Virus on each cluster-node will contain the network node name but not the shared cluster name. 

• Shared cluster discs by default will be protected by the Anti-Virus on the cluster-node which at the moment has the shared cluster discs.

When the shared discs migrate on another cluster-node, they are protected by the Anti-Virus that has control of the drives. 

•  Do not use as an update source in the update task the folder which are located on the shared cluster discs. Otherwise from this folder on the shared cluster disc only the Anti-Virus which is installed on this cluster node and which has control over the disc can update from this folder. 

• On-demand scan of the shared cluster discs performed by the Anti-Virus will not be automatically started if these shared discs will be migrated onto another cluster node.