Oracle Analytics Cloud and Server

Welcome to the Oracle Analytics Community: Please complete your User Profile and upload your Profile Picture

McAfee on your OBIEE Servers(linux)

Received Response
61
Views
10
Comments
User_SX88B
User_SX88B Rank 3 - Community Apprentice

Friends

what is your opinion on installing McAfee on OBIEE 11g servers(Linux servers with just OBIEE on it)?

how vulnerable are BI server without antivirus?

are Linux servers equally vulnerable even thou they are in DMZ network?

BI software by nature is customer facing, with proper authentication and authorization how vulnerable it is to malware?

can you share you experience if you have mcAfee on your linux obiee11g servers()

ss

Answers

  • rmoff
    rmoff Rank 6 - Analytics Lead

    I've never, in 8+ years of working with OBIEE across numerous server installations, seen anti-virus deployed on a Linux server.

    OBIEE is just as vulnerable as any other network-facing application. It's designed to be secure, but sometimes exploits are found. Oracle release quarterly alerts & patches for any security issues across their software stack.

  • [Deleted User]
    [Deleted User] Rank 2 - Community Beginner

    +1 - that would be a first indeed.

  • User_SX88B
    User_SX88B Rank 3 - Community Apprentice

    thanks for the quick response Robin and Christian, same here, i never saw antivirus on Linux serves but the internal security at our organization installed antivirus on all the Linux serves including DB servers. i am running into issues every time i restart OBIEE after server reboots, now i am debating with security team to put OBIEE servers on exception list and they are questing the vulnerability.

    so i though of checking with all you experts..

  • [Deleted User]
    [Deleted User] Rank 2 - Community Beginner

    Believe me in an actual security review the "virus" part would be the least of your issues.

    Pretty sure there are loopholes and forgotten things which wouldn't be accessible from the outside but would allow anyone who's clever enough to get to your data.

  • 2943841 wrote:the internal security at our organization installed antivirus on all the Linux serves including DB servers

    Tell them they can make it safer by unplugging the network cable and turn off the server

    More seriously: does your OBIEE server really needs to be exposed to public (internet) access? OBIEE itself doesn't require internet to work, so if you keep it as a strictly local server on your LAN blocking incoming/outcoming connections from WAN you are fine. I imagine your users have VPN to connect to corporate servers when outside.

    So if OBIEE is a local server you don't need an antivirus on it, as long as you protected all the clients (they can be the problem).

    And as Christian said: virus is the last of your problem, what has a value on OBIEE is the ability to access your data.

  • N Praveen
    N Praveen Rank 1 - Community Starter

    Hi,

    Have you completed the database upgrade of OBIEE (obiee 11g, upgrading database version from 11g to 12c).

    If yes, could you please share me the process or document. We are also planing to upgrade our OBIEE metadata database and wharehouse databse from 11g to 12c. Also changing the database hosts.

    Thank you,

    Praveen

  • [Deleted User]
    [Deleted User] Rank 2 - Community Beginner

    @1040351 Why are you posting in this thread? It has been abandoned by the OP and is a zombie thread since more than 2 months.

    If you have a question - then ask a question in an own thread. Don't resurrect old ones which aren't yours to begin with please.

    You can consult the FAQ to understand the common forum guidelines:

  • N Praveen
    N Praveen Rank 1 - Community Starter

    Sorry for posting different question in this thread.

    Actually user "2943841" was worked on same kind of scenario right now which I am planing and I am unable to find his mail id so, I had requested him in this post.

    Thank you,

    Praveen

  • [Deleted User]
    [Deleted User] Rank 2 - Community Beginner

    Create a new thread, explain your issue in detail and reference any relevant sources you have perused to get to the point where you are at right now. That's how forums work.

  • N Praveen
    N Praveen Rank 1 - Community Starter

    Thank you Mr. Christian Berg for your suggestions, I have created new thread for my issue.