Dell PowerStore 1200T Using the Common Event Enabler 8.x on Windows Platforms
Dell PowerStore 1200T Manual
View all Dell PowerStore 1200T manuals
Add to My Manuals
Save this manual to your list of manuals |
Dell PowerStore 1200T manual content summary:
- Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 1
Dell CEE Using the Common Event Enabler on Windows Platforms Version 8.x Part Number: 302-002-456 July 2022 Rev. 12 - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 2
of your product. CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. WARNING: A WARNING indicates a potential for property damage, personal injury, or death. © 2011 - 2022 Dell Inc. or its subsidiaries. All rights reserved. Dell - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 3
Introduction...8 About CEE...8 System requirements...9 AntiVirus partners...9 Support for third-party applications ...10 Restrictions...10 Related ...22 Set Symantec Endpoint Protection options...22 Set Windows Service Control Manager options 23 Symantec Protection Engine...23 Setting exclusions - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 4
the CAVA Calculator...51 Start the CAVA Calculator...52 Uninstall the CAVA Calculator...52 Configure the sizing tool...52 Enable the sizing tool...53 Manually compile the cava.mof file...53 Create the cavamon.dat file...53 Start the sizing tool...54 Size the antivirus agent...54 (Optional) Gather - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 5
12: Troubleshooting...57 Dell E-Lab Interoperability Navigator...57 Error messages...57 Known problems...57 Training and Professional Services...58 Appendix ...61 Scan on write...61 Scanning after definition file update (manual process 61 Virus-checking continuation...61 CAVA sizing tool...62 CAVA - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 6
Index...82 6 Contents - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 7
For documentation, release notes, software updates, or for information about products, licensing, and service, go to Online Support (registration required) at https://www.dell.com/support. Troubleshooting Go to Online Support. After logging in, search for the applicable Product page. Preface 7 - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 8
for auditing, content/quota management (CQM), Common Asynchronous Publishing Service (VCAPS), and indexing CAVA provides an antivirus solution for Dell the exchange from which it can retrieve events. NOTE: RabbitMQ is supported only for Dell Unity and VNX systems running CEE version 8.8.2.1 and - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 9
a 64-bit platform is not supported. Search the Dell E-Lab™ Interoperability Navigator for consumer applications supported when using CEE, CAVA, and exe, is a .NET Framework 3.5 service. You must enable .NET Framework 3.5. The Microsoft website contains instructions on enabling the .NET Framework 3.5 - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 10
to a RabbitMQ Exchange. CEE forwards events to this exchange, and RabbitMQ routes the events into the correct subscriber queues. NOTE: RabbitMQ is supported only for Dell Unity and VNX systems running CEE version 8.8.2.1 and earlier. Restrictions The following are known limitations at the time of - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 11
● Symantec Endpoint Protection documentation ● Trend Micro ServerProtect for EMC documentation Use of the term Windows Server Unless otherwise noted in this guide, the term "Windows Server" refers to the following versions: ● Windows Server 2008 R2 ● Windows Server 2012 ● Windows Server 2012 R2 - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 12
the third-party AV engines on each participating AV machine before installing CAVA (as part of CEE). Installing the Common Event Enabler contains instructions on installing CEE. NOTE: All packages except Trend Micro ServerProtect must be installed prior to installing CAVA (as part of CEE). Install - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 13
If you are installing F-Secure AntiVirus, use the installation path shown in F-Secure AntiVirus installation procedure. Table 3. F-Secure AntiVirus installation procedure Step 1. Action Install F-Secure AntiVirus AV engine on the Windows AV machine. Procedure F-Secure AntiVirus 2. Start the - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 14
● Under Infection Treatment, select any of the options 5. Click the Advanced tab. 6. On the Advanced tab, select the following: ● Under Protected Areas, select Protect Network Drives. You can also select Protect Floppy Drives and Protect CD-ROM if necessary. ● Under Advanced Protection and Realtime - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 15
Kaspersky Anti-Virus Steps 1. Install Kaspersky Anti-Virus for Windows Servers Enterprise Edition on a server that will interface with the AV machine. Kaspersky documentation provides specific installation steps. 2. Open the Kaspersky Anti-Virus MMC Console. 3. In the left pane, select Real-time - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 16
7. On the Actions tab, in Actions to be performed on infected objects, select one of the following options: ● Block access and disinfect ● Block access and disinfect, delete if disinfection fails ● Block access and delete ● Block access and perform recommended action NOTE: Block access does not work - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 17
9. In the left pane, right-click Real-time file protection and select Properties. The Real-time file protection Properties dialog box appears. 10. On the General tab, select On access and modification. 11. On the Schedule tab, select one of the scheduling options. 12. Click OK to close the Real- - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 18
is sent multiple times to an Dell VNX or Unity device. If you are using McAfee VirusScan version 8.8 or later, read McAfee's KnowledgeBase article for instructions on how to prevent this condition. Steps 1. Create a temporary directory on the hard drive of an AV machine to interface with CAVA, and - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 19
Update. 2. After installation, verify that Microsoft Antimalware Client Version 1.522.0 or later is running. If it is not running, contact Microsoft Support. 3. Install CEE/CAVA (v6.0.0 or later). Go to Installing the Common Event Enabler. Installing Third-Party Application Antivirus Engines 19 - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 20
Windows Update. 2. After installation, verify that Microsoft Antimalware Client Version 1.522.0 or later is running. If it is not running, contact Microsoft Support. 3. Install CEE/CAVA (v6.0.0 or later). Go to Installing the Common Event Enabler. Sophos Anti-Virus About this task Steps 1. Install - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 21
7. On the Cleanup tab in Viruses/spyware, select Automatically clean up items that contain virus/spyware. Select Delete to delete items that cannot be cleaned up. 8. Click OK to close the dialog box. 9. Close the Sophos program. Go to Installing the Common Event Enabler. Installing Third-Party - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 22
Symantec Endpoint Protection About this task Symantec Endpoint resides on an AV machine and interfaces with CAVA version 4.5.2.2 (or later) for Symantec Endpoint Protection versions 11.04, 11.06, and 12.1: Steps 1. Install the Symantec Endpoint software. The Symantec documentation provides specific - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 23
calls by using this protocol. About this task NOTE: You must change the Symantec Protection Engine service from SYSTEM to the same user that is running CAVA, otherwise access problems can result. Domain user account overview provides more information about configuring the domain user and assigning - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 24
Steps 1. Navigate to the Symantec Protection Engine Status page. Click Configuration and Resources. 2. Specify a temporary directory for scanning. NOTE: Allow enough room for this directory to grow because it can become several GBs in size. If a local AV solution is used, ensure to also exclude this - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 25
Install Trend Micro ServerProtect Prerequisites Trend Micro ServerProtect must be installed after installing CAVA. Installing the Common Event Enabler provides instructions on installing CAVA as part of CEE. If CAVA is not installed on the ServerProtect target AV machine, you will receive this - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 26
Figure 1. Trend Micro ServerProtect Real-time Scan options window 26 Installing Third-Party Application Antivirus Engines - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 27
the CEE installation for Windows Server • Uninstall CEE Install CEE Prerequisites ● Download the CEE framework software from Online Support: 1. Open a browser window, and go to Online Support. 2. Perform a search for Common Event Enabler. 3. In the Downloads list, look for the Common Event Enabler - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 28
with the CEE v8.9.4.x release, all CEE installers are signed with Microsoft Authenticode. Instructions for verifying the CEE Installation package are found in the Common Event Enabler Security Configuration Guide. Complete the CEE installation for Windows Server About this task Steps 1. From the - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 29
access to a third-party consumer application. 14. If you are using CAVA, stop and restart the CAVA service. Start, stop, and restart CAVA provides instructions on using the EMC CAVA services. Uninstall CEE About this task To remove the CEE software and perform a clean uninstall: Steps 1. From the - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 30
to Using a VNXe System with CIFS Shared Folders on Online Support. Topics: • Domain user account overview • Determine the interface Data Mover or NAS Server, and run the EMC CAVA service in this user context. Overview of configuring the AV user instructions. 30 Configuring the Domain User Account - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 31
Determine the interface name on the Data Mover About this task This procedure is valid for VNX systems only. You must identify the CIFS interface for the Data Mover before you create a local group on a Data Mover. Frequently, a Data Mover is configured with more than one CIFS interface. If this is - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 32
create a domain user account on the Windows domain controller. The EMC CAVA service is running in the context of this user. Use one of the following context-appropriate name. The name virususer is used as an example in this guide. b. Click Next. The Password dialog box appears. 5. In the Password - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 33
in Create a local group on each Data Mover/NAS Server. NOTE: When using CEE/CAVA with PowerScale systems, the user in which the cava.exe service is running must have access to the CHECK$ share on the PowerScale NAS Server. Refer to the appropriate PowerScale OneFS documentation for details on - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 34
Use this procedure to assign the EMC virus-checking right to the group in a Windows Server: Steps 1. Click Start and select Settings > Control Panel > Administrative Tools > EMC Unity VNX VNXe NAS Management. NOTE: Installing Management Applications on VNX for File provides information on installing - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 35
6. Click Add. The Select Users or Groups window appears. 7. In the Select Users or Groups window: a. Select the domain from the Look in: list box. b. Select the AV user account that you created in Create from User Manager for Domains. c. Click Add. d. Click OK to close the Select Users or Groups - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 36
Data Mover or NAS Server. Installing Management Applications on VNX for File provides instructions on installing the snap-in. Open the EMC Unity/VNX/VNXe NAS Management snap-in, click Help in the toolbar. NOTE: The SMB/CIFS services must be configured and started on the VNX Data Mover or Unity NAS - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 37
$ server_viruschk server_2 Output: server_2 : 10 threads started 1 Checker IP Address(es): 172.24.101.217 ONLINE at Tue Jan 25 23:29:04 2005 (GMT-00:00) RPC program version: 3 CAVA release: 3.3.5, AV Engine: Network Associates Last time signature updated: Tue Jan 25 23:28:14 2005 (GMT-00:00) 1 File - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 38
a Windows Server by using this procedure: Steps 1. From the Windows taskbar, click Start and select Settings > Control Panel > Administrative Tools > Services. 2. Scroll to EMC CAVA. 3. Right-click EMC CAVA and click Start, and select either Stop, Pause, Resume, or Restart (whichever is appropriate - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 39
Verify the status of a file system scan About this task Steps To verify the status of a scan on a file system, use this command syntax: $ server_viruschk -fsscan -list where: = name of the Data Mover = name of the file system Example: To verify the scan of a - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 40
-on-first-read enabled. NOTE: Currently, McAfee version 8.0i supports automatic detection of virus definition updates. The VNX Operating Environment for . Instructions for retrieving the configuration file on Unity systems are described in Virus-checking continuation. 2. Stop the EMC CAVA service. - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 41
in viruschecker.conf provides more information. Instructions for retrieving the configuration file on modify the maxVCThreads parameter, and then reboot the SPs. Unity Service Commands Technical Notes provides more information on the svc_nas command. Support for more information. Managing CAVA 41 - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 42
When CAVA detects an infected file, it can automatically send notification to the client through Windows pop-up messages when the Windows Messenger service is enabled. For administrators, events are logged in the system log. Use this procedure to enable messaging on a Windows Server: Steps 1. Click - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 43
the default. Each third-party antivirus vendor varies slightly on which type of remediation works with CAVA. Types of remediation lists the types of remediation supported by the third-party vendors. Third-party vendor documentation provides more information. Table 9. Types of remediation Vendor - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 44
server_x> = name of the Data Mover 5. To affect the changes you made to the cifsmsg.txt file, restart (stop and start) the CIFS service on the Data Mover by using this command syntax: $ server_setup -P cifs -o stop $ server_setup -P cifs -o start where: = name of the - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 45
the Windows Server Registry can cause serious problems that require a reinstallation of the operating supported AgentType is driver. This option allows for future support driver is properly configured: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EMCVirCk The correct settings for the EMC AV - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 46
Steps 1. From the Windows taskbar, click Start and select Settings > Control Panel > Administrative Tools > Event Viewer. 2. From the Event Viewer window, select System Log. 3. In the right pane, double-click EMCVirCk in the Event Viewer's System Log list. The Event Properties window appears. 4. - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 47
Windows Registry. NOTE: Any time you modify the CEE section of the Registry, except for Verbose and Debug, you need to restart the EMC CAVA service. Steps 1. Open a command window on the machine where CEE and VCAPS are installed and type regedit. 2. On the Windows Registry Editor window, navigate to - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 48
up CEE for RabbitMQ Set up CEE for RabbitMQ About this task NOTE: RabbitMQ is supported only for Dell Unity and VNX systems running CEE version 8.8.2.1 and earlier. You must configure 2. Save the MsgSys.xml file. 3. Restart the CEE service. 48 Managing CEE for RabbitMQ - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 49
Registry. NOTE: Any time you modify the CEE section of the Registry, except for Verbose and Debug, you need to restart the EMC CAVA service. Steps 1. Open a command window on the machine where CEE and the Index application are installed and type regedit. 2. On the Windows Registry Editor window - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 50
Results The FeedInterval and MaxEventsPerFeed delivery cadences are used simultaneously. The Index application sends a list of events to the Splunk consumer application, not the actual content of files. 50 Managing Indexing - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 51
10 Monitoring and Sizing the Antivirus Agent You can use the CAVA Calculator to estimate the number of AV machines that are required before installing the antivirus agent. You can also use the CAVA sizing tool to monitor the antivirus agent usage on the network and determine the optimal number of AV - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 52
on the monitoring sizing tool server and on all AV Enable the sizing tool machines that you want to monitor. 2. Manually compile the cava.mof file used by CEE CAVA. Manually compile the cava.mof file 3. Create the cavamon.dat file on the monitoring server. Create the cavamon.dat file NOTE - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 53
not type any decimal value greater than 60. Any number greater than 60 is not supported in Visual Basic. 7. Close the Registry Editor. 8. Restart CAVA, as described in Start, stop, and restart CAVA. Manually compile the cava.mof file About this task Before starting the cavamon.exe utility, you must - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 54
sizing tool About this task Steps 1. Restart the EMC CAVA service. 2. From the Program Files\EMC\CEE directory, run enabled on all AV machines that you want to monitor. ● If you have any problems while running the script, download and install the Windows Script Host (available at https:// www - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 55
11 Third-Party Consumer Applications This chapter discusses setting up access to a third-party vendor application, which is used for managing the content stored on the file systems, and how to allow communication with CEE. Topics: • Overview • Set up consumer application access Overview A third- - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 56
whether the event is re-sent at a later time. 4. Double-click Enable. ● Type either 0 to disable or 1 to enable the CEPA functionality that supports the consumer application being used. 5. Restart the computer. Results NOTE: Any time you modify the CEE section of the Registry, except for Verbose and - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 57
Roadmap for VNX contains additional information about using Online Support and resolving problems. Topics: • Dell E-Lab Interoperability Navigator • Error messages • Known problems • Training and Professional Services Dell E-Lab Interoperability Navigator The Dell E-Lab Interoperability Navigator - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 58
11. CEE known problems and workarounds (continued) Known problem Symptom Workaround If Go to Online Support at https://www.dell.com/support for course and registration information. Professional Services can help you your Customer Support Representative for more information. 58 Troubleshooting - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 59
A Unity and VNX CAVA Information This section contains CAVA-specific information for Dell Unity and VNX systems. Topics: • CAVA concepts • CAVA restrictions and limitations • CAVA and Data Mover or NAS server • User interface choices • CAVA features • Virus-checking client • Configuring - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 60
storage based on the support environment and interface preferences. This guide describes how to configure Management Applications on VNX for File includes instructions on launching Dell Unisphere software, and , this document also describes how to manually create a configuration file, assign the EMC - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 61
The latest versions of all supported third-party anti-virus engines support automatic pattern updates. It with a time reference stored in the EMC CAVA service. If the file's access time is earlier than closing it. Scanning after definition file update (manual process) To verify files after the third- - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 62
of unscanned files is stored in the /.etc/viruschecker.audit file on each Data Mover or NAS server. On a VNX, use this command to manually update this file. 1. Store the list of unscanned files by using this command syntax: $ server_viruschk -audit where: = name of the Data - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 63
Data Mover, or Unity software on a NAS server. The VC client interacts with the AV engine, which processes requests from the VC client. Scanning is supported only for SMB/CIFS access. While the scan or other related actions are taking place, access to the file from any SMB/CIFS client is - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 64
want to control the scope and style of the virus scanning. This guide describes only the command-line procedures. In a Windows Server environment, you to Unisphere. Installing Management Applications on VNX for File provides instructions on installing the snap-in. Create and edit viruschecker.conf - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 65
the CAVA configuration by using either the Unity CLI or Unisphere software. Refer to the Unity Unisphere Command Line Interface User Guide for CLI commands. Instructions for retrieving the configuration file on Unity systems are described in Virus-checking continuation. You must put a copy of the - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 66
.conf parameters provides a complete list of viruschecker.conf parameters, including mask: Steps 1. Open the viruschecker.conf file using an editor. Instructions for retrieving the configuration file on Unity systems are described in Virus-checking continuation. 2. Locate the masks= entry. 3. Type - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 67
.20.15:192.16.20.16 [2510:0:175:111:0:4:aab:ad2]: : is not supported. [2510:0:175:111:0:4:aab:a6f]:1 92.16.20.17 NOTE: IPv6 addresses should its IP address from this file before shutting down the EMC CAVA service. CIFSserver= (optional) Identifies the interface on the VNX - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 68
Table 13. Parameters in the viruschecker.conf file (continued) Parameter Description Example If the parameter is not given or is equal to 0, it means no file size limitation is set. The file size is in bytes with a 4 GB maximum. highWaterMark= (optional) Edits the highWaterMark parameter. - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 69
Table 13. Parameters in the viruschecker.conf file (continued) Parameter Description CAVA service is running under on the CEE machine. Example Domain\user account: msrpcuser=CEE1\user1 surveyTime= (optional) Specifies the time interval used to scan all AV - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 70
name assigned to a simple user account that the EMC CAVA service is running under on the CEE machine. is If the cepp.conf or viruschecker.conf files are updated manually: ○ the format for the domain user in these files Guide provides more information. 70 Unity and VNX CAVA Information - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 71
load the file into memory. This updates the viruschecker.conf file without stopping the virus-checking services. For Unity systems, instructions for retrieving the configuration file to manually update configuration information on a NAS server are described in Virus-checking continuation and in the - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 72
Infected Files : 0 These fields display only if the infected files are found. They remain visible until the Data Mover is rebooted or the EMC CAVA service has been restarted. ● Mimic the client access to files on the Data Mover for various levels of access. For example, perform a write from one - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 73
define only one CEPA pool. ● For post-events and post-error events, you can define up to three CEPA pools. For VNX systems, you must manually create the cepp.conf file before using CEPA. Create the cepp.conf file provides details. For Dell Unity systems, use Unisphere to create and manage - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 74
file resides on the VNX Data Mover. To use CEPA, each VNX Data Mover that runs the EMC CAVA service must have a valid cepp.conf file on it or the EMC CAVA service will not start. Examples of cepp.conf Example 1 shows a cepp.conf file that uses one continuous line for most - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 75
& Events > Events Publishing). ● For VNX systems, the cepp.conf file must be defined with the correct syntax to ensure that the EMC CEPA service starts on the Data Mover. Steps 1. Log in to the system with your administrative username and password: login: password: where - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 76
link-local network addresses for defining CEPA servers is not supported. = time to scan each CEPA server. name assigned to the user account that the EMC CAVA service is running under on the CEE machine. For example, if the EMC CAVA service is running under a user called user1, the cepp. - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 77
Table 14. Event descriptions (continued) Value Definition OpenFileWrite OpenFileWriteOffline OpenDir FileRead FileWrite CreateFile CreateDir DeleteFile DeleteDir CloseModified CloseUnmodified CloseDir RenameFile RenameDir SetAclFile SetAclDir SetSecFile SetSecDir Sends a notification when a file - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 78
user account or user account that is part of a domain that the EMC CAVA service is running under on the CEE machine, for example, user1 or CEE1\user1. Edit For Unity systems, refer to the Unisphere online help for instructions on editing Events Publishing configuration information. Steps 1. Copy the - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 79
NAS Server. Installing Management Applications on VNX for File contains installation instructions for the MMC snap-in. NOTE: You cannot use Microsoft start the CEPA facility, use this command syntax: $ server_cepp -service -start where: = name of the Data Mover Example: To - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 80
: server_2 : CEPP Started Stop the CEPA facility About this task Steps To stop the CEPA facility, use this command syntax: $ server_cepp -service -stop where: = name of the Data Mover Example: To stop the CEPA facility on the Data Mover server_2, type: $ server_cepp server_2 - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 81
pool_name server_required access_checks_ignored req_timeout retry_timeout pool1 yes 0 5000 25000 Display the CEPA facility statistics About this task Steps To display statistics about the CEPA pool, use this command syntax: $ server_cepp -pool -stats -all where: = - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 82
Microsoft System Center 2012 Endpoint Protection 20 Sophos 20 supported 9 Symantec Endpoint Protection 22 Symantec Protection Engine 23 59 cavamon.dat file 53 cavamon.vbs file 54 CEE install 27 start service 28 uninstall 29 CEPA display pool information 81 display properties 80 display statistics - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 83
, enable 39 scanning on first read 61 when it occurs 63 scanning criteria, defining 66 scanning quick glance chart 63 server_viruschk 36 service, start 28 services, Messenger 42 set up access to consumer application 55 set up CEE message exchange 48 shutdown parameter 66 signing, install package 28 - Dell PowerStore 1200T | Using the Common Event Enabler 8.x on Windows Platforms - Page 84
T threads, viruschk 41 Trend Micro ServerProtect AV engine, installing 25 troubleshooting 57 U update virus definition files 61 user interface choices 60 V VC client audit 37 VCAPS to Data Mover 65 updating 71 viruschk threads 41 viruschk.parameter 42 W Windows Messenger service 42 write, scan on 61
Dell CEE
Using the Common Event Enabler on Windows
Platforms
Version 8.x
Part Number: 302-002-456
July 2022
Rev. 12