Home » Dell Manuals » Storage Devices » Dell PowerStore 1200T » Manual Viewer

Dell PowerStore 1200T Using the Common Event Enabler 8.x on Windows Platforms - Page 22

Symantec Endpoint Protection, Antivirus and Antispyware Protection Options

View all Dell PowerStore 1200T manuals

Add to My Manuals
Save this manual to your list of manuals

Page 22 highlights

Symantec Endpoint Protection About this task Symantec Endpoint resides on an AV machine and interfaces with CAVA version 4.5.2.2 (or later) for Symantec Endpoint Protection versions 11.04, 11.06, and 12.1: Steps 1. Install the Symantec Endpoint software. The Symantec documentation provides specific installation steps. 2. Open the Windows Registry Editor and navigate to: ● For 32-bit operating systems: HKEY_LOCAL_MACHINE\Software\Symantec\Symantec Endpoint Protection\AV\Storages\Filesystem\RealTimeScan ● For 64-bit operating systems: HKEY_LOCAL_MACHINE\Software\Wow6432Node\Symantec\Symantec Endpoint Protection\AV\Storages\Filesystem\RealTimeScan 3. Set the RealTimeScan value: ● For Symantec Endpoint Protection version 11.04, right-click RealTimeScan and select New > Binary Value. ● For Symantec Endpoint Protection versions 11.06 and 12.1, right-click RealTimeScan and select New > DWORD Value. 4. In the Value name text box, type DisableAlertSuppression. 5. In Value data, type a value of 01. 6. Click OK. Set Symantec Endpoint Protection options About this task For Symantec Endpoint Protection versions 11.04, 11.06, and 12.1, perform the following steps: Steps 1. Open Symantec Endpoint Protection. 2. For Symantec Endpoint Protection versions 11.04 and 11.06, click Antivirus and Antispyware Protection Options. For Symantec Endpoint Protection version 12.1, click Virus and Spyware Protection Options. 3. Click Change Settings. 4. For Symantec Endpoint Protection versions 11.04 and 11.06, select the File System Auto-Protect tab. For Symantec Endpoint Protection version 12.1, select the Auto-Protect tab. 5. Select Enable File System Auto-Protect. 6. In the File Types section, select All Types. 7. For Symantec Endpoint Protection versions 11.04 and 11.06, in the Options section, ensure that Scan files on network drives is selected. For Symantec Endpoint Protection version 12.1, in the Options section, ensure that: a. Scan files on remote computers is selected. b. Only when files are executed is cleared. 8. Click Advanced. 9. In the Scan files when section, select Scan when a file is accessed or modified. 10. Click OK to close the Auto-Protect Advanced Options window. 11. Click OK to close the Protection Settings window. 22 Installing Third-Party Application Antivirus Engines

Section	Page
Dell CEE Using the Common Event Enabler on Windows Platforms	1
Contents	3
Preface	7
Introduction	8
About CEE	8
System requirements	9
AntiVirus partners	9
Support for third-party applications	10
Restrictions	10
Related information	11
Installing Third-Party Application Antivirus Engines	12
Installation overview	12
Computer Associates eTrust	13
F-Secure AntiVirus	14
Kaspersky Anti-Virus	15
McAfee VirusScan	18
McAfee Endpoint Security Threat Prevention	19
Microsoft Forefront Endpoint Protection 2010	19
Microsoft System Center 2012 Endpoint Protection	20
Sophos Anti-Virus	20
Symantec Endpoint Protection	22
Set Symantec Endpoint Protection options	22
Set Windows Service Control Manager options	23
Symantec Protection Engine	23
Setting exclusions	23
Setting container handling policies	24
Modifying LimitChoiceStop settings	24
Trend Micro ServerProtect	24
Install Trend Micro ServerProtect	25
Installing the Common Event Enabler Framework	27
Install CEE	27
Verifying the CEE installation package	28
Complete the CEE installation for Windows Server	28
Uninstall CEE	29
Configuring the Domain User Account	30
Domain user account overview	30
Determine the interface name on the Data Mover	31
Create a domain user account	32
Create with Active Directory on a Windows Server	32
Create from User Manager for Domains	32
Create a local group on each Data Mover or NAS server	33
Assign the EMC virus-checking right to the group	33
Assign local administrative rights to the AV user	34
Managing CAVA	36
(Optional) Install EMC Unity/VNX/VNXe NAS Management snap-in	36
Display virus-checking information	36
Audit virus-checking information	37
Start, stop, and restart CAVA	38
Perform a full file system scan	38
Verify the status of a file system scan	39
Stop a file system scan	39
Enable scan-on-first-read	39
Update virus definition files	40
Turn off the AV engine	40
Turn on the AV engine	40
Manage CAVA thread usage	41
Adjust the maxVCThreads parameter	41
View the application log file from a Windows Server	42
Enable automatic virus detection notification	42
Customize virus-checking notification	42
Customize notification messages	43
Managing the Registry and AV Drivers	45
EMC CAVA configuration Registry entries	45
EMC AV driver Registry entry	45
Manage the EMC AV driver	45
Managing VCAPS	47
Set up access	47
Managing CEE for RabbitMQ	48
Set up CEE for RabbitMQ	48
Managing Indexing	49
Set up access for Splunk	49
Monitoring and Sizing the Antivirus Agent	51
Install the CAVA Calculator	51
Start the CAVA Calculator	52
Uninstall the CAVA Calculator	52
Configure the sizing tool	52
Enable the sizing tool	53
Manually compile the cava.mof file	53
Create the cavamon.dat file	53
Start the sizing tool	54
Size the antivirus agent	54
(Optional) Gather AV statistics with cavamon.vbs	54
Third-Party Consumer Applications	55
Overview	55
Set up consumer application access	55
Troubleshooting	57
Dell E-Lab Interoperability Navigator	57
Error messages	57
Known problems	57
Training and Professional Services	58
Unity and VNX CAVA Information	59
CAVA concepts	59
CAVA restrictions and limitations	59
CAVA and Data Mover or NAS server	60
User interface choices	60
CAVA features	60
Load balancing and fault tolerance	61
Updating virus definition files	61
Scan-on-first-read	61
Scan on write	61
Scanning after definition file update (manual process)	61
Virus-checking continuation	61
CAVA sizing tool	62
CAVA Calculator	63
Virus-checking client	63
Configuring viruschecker.conf	64
Create and edit viruschecker.conf	64
Define AV machine IP addresses in viruschecker.conf	65
Send viruschecker.conf to the Data Mover	65
(Optional) Define VC scanning criteria	66
viruschecker.conf parameters	66
Managing the VC Client	70
Start the VC client	70
Stop the VC client	71
Update the viruschecker.conf file	71
Verify the installation	72
Unity and VNX CEPA Information	73
CEPA concepts	73
CEPA restrictions and limitations	73
Overview of the cepp.conf file	74
Create the cepp.conf file	75
Edit the cepp.conf file	78
Assign rights in Windows Server	78
Assign rights for third-party applications	79
Start the CEPA facility	79
Verify the CEPA status	79
Stop the CEPA facility	80
Display the CEPA facility properties	80
Display the CEPA facility statistics	81
Display detailed information for a CEPA pool	81
Index	82
A	82
B	82
C	82
D	82
E	82
F	82
H	83
I	83
K	83
L	83
M	83
N	83
P	83
R	83
S	83
T	84
U	84
V	84

Match case Limit results 1 per page

Symantec Endpoint Protection

About this task

Symantec Endpoint resides on an AV machine and interfaces with CAVA version 4.5.2.2 (or later) for Symantec Endpoint

Protection versions 11.04, 11.06, and 12.1:

Steps

Install the

Symantec Endpoint

software. The Symantec documentation provides specific installation steps.

Open the

Windows Registry Editor

and navigate to:

●

For 32-bit operating systems:

HKEY_LOCAL_MACHINE\Software\Symantec\Symantec Endpoint

Protection\AV\Storages\Filesystem\RealTimeScan

●

For 64-bit operating systems:

HKEY_LOCAL_MACHINE\Software\Wow6432Node\Symantec\Symantec Endpoint

Protection\AV\Storages\Filesystem\RealTimeScan

Set the RealTimeScan value:

●

For Symantec Endpoint Protection version 11.04, right-click

RealTimeScan

and select

New

Binary Value

●

For Symantec Endpoint Protection versions 11.06 and 12.1, right-click

RealTimeScan

and select

New

DWORD Value

In the

Value name

text box, type

DisableAlertSuppression

Value data

, type a value of

Click

Set Symantec Endpoint Protection options

About this task

For Symantec Endpoint Protection versions 11.04, 11.06, and 12.1, perform the following steps:

Steps

Open

Symantec Endpoint Protection

For Symantec Endpoint Protection versions 11.04 and 11.06, click

Antivirus and Antispyware Protection Options

For Symantec Endpoint Protection version 12.1, click

Virus and Spyware Protection Options

Click

Change Settings

For Symantec Endpoint Protection versions 11.04 and 11.06, select the

File System Auto-Protect

tab.

For Symantec Endpoint Protection version 12.1, select the

Auto-Protect

tab.

Select

Enable File System Auto-Protect

In the

File Types

section, select

All Types

For Symantec Endpoint Protection versions 11.04 and 11.06, in the

Options

section, ensure that

Scan files on network

drives

is selected.

For Symantec Endpoint Protection version 12.1, in the

Options

section, ensure that:

Scan files on remote computers

is selected.

Only when files are executed

is cleared.

Click

Advanced

In the

Scan files when

section, select

Scan when a file is accessed or modified

10.

Click

to close the

Auto-Protect Advanced Options

window.

11.

Click

to close the

Protection Settings

window.

Installing Third-Party Application Antivirus Engines