harbar.net component based software & platform hygiene

Antivirus and SharePoint 2013

Print | posted on Friday, February 22, 2013 6:44 PM

With the discontinuation of Forefront Protection for SharePoint, Microsoft no longer provides a streaming antivirus solution for SharePoint. This has lead to an ever increasingly common customer question, “what do I use for SharePoint antivirus?”. This post aims to detail the options (right now there is only one) as opposed to answering the question repeatedly. It is NOT intended to be a discussion on why you need a streaming antivirus solution for SharePoint, which is potentially a post for another day. For now, assume you have that requirement, so what are the options?

SharePoint 2013 introduces NO CHANGES to the SharePoint Antivirus API (a.k.a SharePoint Portal Server Virus Scanning Application Programming Interface (VS API)). Therefore any product that works with SharePoint 2010, in principal, will work with SharePoint 2013.

However 3rd party vendors in this space have always been extremely slow to implement support for the latest version of SharePoint or the host operating system. In some cases it’s the ability to run, in other cases it’s simply a matter of official support.

Let’s take a look at the usual suspects in this space, such as they are. Right now it’s not a good state of affairs.

  1. Forefront Protection for SharePoint 2010
    Yes, we can continue to use this and it will work just fine with SharePoint 2013. However as the product is discontinued, this is not a wise choice. Furthermore you cannot actually buy it. So unless you already have it purchased you are out of luck. If you already have it, it will continue to be supported until December 31st 2015. You will receive AV definition updates until that date as well. After that you need to migrate to something else.
  2. AvePoint DocAve Antivirus for SharePoint
    This product is also discontinued. Not an option.
  3. TrendMicro PortalProtect
    Does NOT currently support SharePoint 2013 or Windows Server 2012. Both are “coming” in Q3 2013. Won’t install, won’t work. Not an option.
  4. BitDefender
    This product is discontinued. Not an option.
  5. Symantec Protection for SharePoint
    Does not support SharePoint 2013. Can install, but won’t detect SharePoint 2013 without a registry hack. Not an option.
  6. McAfee Security for SharePoint
    Does not support SharePoint 2013 or Windows Server 2012. Won’t install, won’t work. Not an option.
  7. Sophos Antivirus Protection for SharePoint
    Does not support SharePoint 2013 or Windows Server 2012. Can install, but won’t detect SharePoint 2013 without hacks. Not an option.
  8. Kapersky Security for SharePoint Server
    Does not support SharePoint 2013. Can’t detect SharePoint 2013 without registry hack. Not an option.

Great so far huh? The usual suspects are really doing a stand up job!

The good news is there is another option. ESET. A very good company and you may be familiar with their work for client OS AV. This is the only vendor who has had the smarts to step into the void left by the discontinuation of Forefront.

ESET Security for Microsoft SharePoint Server http://www.eset.com/beta/sharepoint/

The only downside is it’s currently a “beta” but the RTM is coming very soon. But it works great, and has a number of nifty features. The performance reporting is especially useful.

image

image

image

 

So there you have it. Right now the only option is ESET Security for SharePoint. Hopefully the other vendors will get their act together, but time will tell. If you happen to work for those companies and have news for me, please get in touch and I can update this page (which I will review and update once a month).

 

s.

Feedback

Gravatar

# re: Antivirus and SharePoint 2013

Wow! Great post Spencer but what brutal results! I happen to know some people at some of the vendors you mentioned. I'll tell them to get their butts in gear! Would love to see a post sometime on why you think AV is needed or not for SharePoint. I know some of these vendors have a hard time selling AV for SharePoint because they view it simply as a document repository. Documents can of course contain malware but it's just not the most common vector. Thanks for posting this.

2/23/2013 3:41 AM | Antonio Maio
Gravatar

# re: Antivirus and SharePoint 2013

Great Post Spence. Thanks for doing the research.

2/25/2013 10:55 PM | Matt Engibous
Gravatar

# re: Antivirus and SharePoint 2013

Thanks for the great info, I have FF2010 but it refuses to install on 2012 server with SP 2013. ESET you are my last only hope!

4/18/2013 6:09 PM | Wizard
Gravatar

# re: Antivirus and SharePoint 2013

Great post, Spence! Thank you!

4/23/2013 6:19 PM | Enrique Lima

Post Comment

Title  
Name  
Email
Url
Comment   
Please add 8 and 8 and type the answer here: