Oracle Communities

Oracle Analytics and AI

Child Item

McAfee on your OBIEE Servers(linux)

User_SX88B

Friends

what is your opinion on installing McAfee on OBIEE 11g servers(Linux servers with just OBIEE on it)?

how vulnerable are BI server without antivirus?

are Linux servers equally vulnerable even thou they are in DMZ network?

BI software by nature is customer facing, with proper authentication and authorization how vulnerable it is to malware?

can you share you experience if you have mcAfee on your linux obiee11g servers()

Find more posts tagged with

Accepted answers

All comments

rmoff

I've never, in 8+ years of working with OBIEE across numerous server installations, seen anti-virus deployed on a Linux server.

OBIEE is just as vulnerable as any other network-facing application. It's designed to be secure, but sometimes exploits are found. Oracle release quarterly alerts & patches for any security issues across their software stack.

[Deleted User]

+1 - that would be a first indeed.

User_SX88B

thanks for the quick response Robin and Christian, same here, i never saw antivirus on Linux serves but the internal security at our organization installed antivirus on all the Linux serves including DB servers. i am running into issues every time i restart OBIEE after server reboots, now i am debating with security team to put OBIEE servers on exception list and they are questing the vulnerability.

so i though of checking with all you experts..

[Deleted User]

Believe me in an actual security review the "virus" part would be the least of your issues.

Pretty sure there are loopholes and forgotten things which wouldn't be accessible from the outside but would allow anyone who's clever enough to get to your data.

Gianni Ceresa

2943841 wrote:the internal security at our organization installed antivirus on all the Linux serves including DB servers

Tell them they can make it safer by unplugging the network cable and turn off the server

More seriously: does your OBIEE server really needs to be exposed to public (internet) access? OBIEE itself doesn't require internet to work, so if you keep it as a strictly local server on your LAN blocking incoming/outcoming connections from WAN you are fine. I imagine your users have VPN to connect to corporate servers when outside.

So if OBIEE is a local server you don't need an antivirus on it, as long as you protected all the clients (they can be the problem).

And as Christian said: virus is the last of your problem, what has a value on OBIEE is the ability to access your data.

N Praveen

Hi,

Have you completed the database upgrade of OBIEE (obiee 11g, upgrading database version from 11g to 12c).

If yes, could you please share me the process or document. We are also planing to upgrade our OBIEE metadata database and wharehouse databse from 11g to 12c. Also changing the database hosts.

Thank you,

Praveen

[Deleted User]

@1040351 Why are you posting in this thread? It has been abandoned by the OP and is a zombie thread since more than 2 months.

If you have a question - then ask a question in an own thread. Don't resurrect old ones which aren't yours to begin with please.

You can consult the FAQ to understand the common forum guidelines:

N Praveen

Sorry for posting different question in this thread.

Actually user "2943841" was worked on same kind of scenario right now which I am planing and I am unable to find his mail id so, I had requested him in this post.

Thank you,

Praveen

[Deleted User]

Create a new thread, explain your issue in detail and reference any relevant sources you have perused to get to the point where you are at right now. That's how forums work.

N Praveen

Thank you Mr. Christian Berg for your suggestions, I have created new thread for my issue.