Dell PowerStore 1200T Using the Common Event Enabler 8.x on Windows Platforms - Page 40

Update virus definition files, Turn off the AV engine, Turn on the AV engine

Get Dell PowerStore 1200T PDF manuals and user guides View all Dell PowerStore 1200T manuals
Add to My Manuals
Save this manual to your list of manuals

Page 40 highlights

the time scan (scan-on-first-read) functionality. The reference time is stored in memory and in the viruschecker.dat file located in the /.etc directory. The time is persistent after a stop or start of the virus-checker service or after restarting the Data Mover. For VNX systems, use this command to enable the scan-on-first-read functionality. Steps To enable scan-on-first-read, use this command syntax: $ server_viruschk -set accesstime=0205231130.00 where: = name of the Data Mover Example: To enable scan-on-first-read on file system server 2, type: $ server_viruschk server_2 -set accesstime=0205231130.00 Output: server_2 : done Update virus definition files The antivirus agent can automatically detect a new version of the virus definition file and update the access time. When a CIFS user accesses a file, the file is scanned with the latest virus definitions, even if it has not been modified since the previous scan. Each time the antivirus agent receives an update, an entry in the Event Log is made. Updates are made through an antivirus agent heartbeat. To use this feature you must have scan-on-first-read enabled. NOTE: Currently, McAfee version 8.0i supports automatic detection of virus definition updates. The VNX Operating Environment for File Release Notes and Dell E-Lab Interoperability Navigator provide the latest information on other antivirus products. Turn off the AV engine About this task Use this procedure to turn off the AV engine on an AV machine. If you do not, the virus-checking capability of the AV machine is compromised and the SMB/CIFS files stored on VNX or Unity might be susceptible to virus infection: Steps 1. Exclude the AV machines from the list of servers providing virus-checking capability to VNX or Unity. Define AV machine IP addresses in viruschecker.conf provides more information. Instructions for retrieving the configuration file on Unity systems are described in Virus-checking continuation. 2. Stop the EMC CAVA service. Start, stop, and restart CAVA provides more information. 3. Disable the third-party realtime scanning feature from the AV machine. The third-party application documentation provides more information. Turn on the AV engine About this task If you turned off the AV engine on an AV machine, use this procedure to restore the virus checking to its fully operational configuration: 40 Managing CAVA

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
the time scan (scan-on-first-read) functionality. The reference time is stored in memory and in the viruschecker.dat file located
in the /.etc directory. The time is persistent after a stop or start of the virus-checker service or after restarting the Data Mover.
For VNX systems, use this command to enable the scan-on-first-read functionality.
Steps
To enable scan-on-first-read, use this command syntax:
$ server_viruschk
<movername>
-set accesstime=0205231130.00
where:
<movername>
= name of the Data Mover
Example:
To enable scan-on-first-read on file system server 2, type:
$ server_viruschk server_2 -set accesstime=0205231130.00
Output:
server_2 : done
Update virus definition files
The antivirus agent can automatically detect a new version of the virus definition file and update the access time. When a CIFS
user accesses a file, the file is scanned with the latest virus definitions, even if it has not been modified since the previous scan.
Each time the antivirus agent receives an update, an entry in the Event Log is made. Updates are made through an antivirus
agent heartbeat. To use this feature you must have scan-on-first-read enabled.
NOTE:
Currently, McAfee version 8.0i supports automatic detection of virus definition updates. The
VNX Operating
Environment for File Release Notes
and Dell E-Lab Interoperability Navigator provide the latest information on other
antivirus products.
Turn off the AV engine
About this task
Use this procedure to turn off the AV engine on an AV machine. If you do not, the virus-checking capability of the AV machine is
compromised and the SMB/CIFS files stored on VNX or Unity might be susceptible to virus infection:
Steps
1.
Exclude the AV machines from the list of servers providing virus-checking capability to VNX or Unity.
Define AV machine IP
addresses in viruschecker.conf
provides more information.
Instructions for retrieving the configuration file on Unity systems are described in
Virus-checking continuation
.
2.
Stop the EMC CAVA service.
Start, stop, and restart CAVA
provides more information.
3.
Disable the third-party realtime scanning feature from the AV machine. The third-party application documentation provides
more information.
Turn on the AV engine
About this task
If you turned off the AV engine on an AV machine, use this procedure to restore the virus checking to its fully operational
configuration:
40
Managing CAVA