Understand antivirus applications

Antivirus applications include any installable software packages that exist locally on a host computer and provide detection and response services for malicious applications.

Traditionally, antivirus applications have been deployed as standalone applications on the SCADA LAN. As installations become larger and more geographically dispersed, a higher level of central control is necessary. When antivirus applications are deployed, we recommend that a management server be setup to create a single point for the delivery of updates, the tracking of update status, and the monitoring of logs. This management server application should be deployed on an independent host. It is not recommended to be installed on an existing SCADA server or domain controller. If virtualization technology is available, the management server is recommended to be installed on a dedicated virtual machine (assuming the software requirements permit it). For generic installation guidelines, as well as recommendations for bandwidth controls, refer to Deployment Considerations.