Antivirus on web service server

Is there any documentation for antivirus policies for the NAV web service server? Exclusions, best practices etc.

Wouldn’t that be more a firewall issue than an AV issue?
To my knowledge you just need to allow the web service port in the firewall and that’s it.