11.12 Antivirus monitoring

---

Most current antivirus software will automatically generate a log entry each time a virus is detected. The operations group should closely monitor these antivirus log entries and should generate a periodic report for review by the Exchange management team.

Software vendors regularly supply updates for virus definition files. These virus definition file updates should be logged in the Exchange administrator's change log.

Any concerted virus attack should be considered a critical problem and should be assigned the highest possible priority.

---