Antivirus configuration

In order to assist in addressing the threat of malware and to minimize the risk AVEVA Enterprise SCADA users face, AVEVA has tested the deployment and use of antivirus technologies on the current AVEVA Enterprise SCADA product suite base. A Microsoft Windows operating system was used for our testing. This included Windows client workstations and servers.

While those tests focused on a specific antivirus product, the test results were used to develop general configuration guidelines which can be applied to products from most major antivirus vendors. This allows customers to make use of their existing experience, site-licenses, and corporate-level agreements with antivirus vendors while supporting the stability of their critical systems.

The test was performed on AVEVA Enterprise SCADA systems without any custom project-specific applications included. This allowed for the development of general guidelines, but each antivirus deployment will have customizations that still require testing and validation which is critical prior to operational use. Each deployment will need to verify the compatibility of the recommended settings and modify where necessary. Document any project specific configuration required for custom applications, unique hardware, and operational loads. When possible, it is recommended to deploy the antivirus application to a test system before applying configuration changes to operational systems.

While Internet access is not commonly available and is not recommended for SCADA networks, there are individual cases that offer compelling reasons to enable Internet access. Installing antivirus without maintaining updates does not provide significant protection to any system, though it can be dangerously effective at providing a false sense of security to users. AVEVA recommends that the antivirus application should be updated on a regular basis.