Dell PowerStore 1200T Using the Common Event Enabler 8.x on Windows Platforms - Page 64

Configuring viruschecker.conf, Create and edit viruschecker.conf

Page 64 highlights

Table 12. Scanning quick glance chart On the Data Mover/NAS server Does scanning occur Read a file (scan-on-first-read) Yes Move or copy a file Yes Create and save a file Yes Modify and close a file Yes Restore from a backup, only if it needs to restore a file (write) Yes Rename: New name (extension is not in masks= and is in excl=) a No Rename: Original filename (extension is not in masks= and is not in excl=), new No name (extension is not in masks= and is not in excl=) has same extensiona Rename: Original filename (extension is not in masks= and is not in excl=), new Yes name (extension is in masks= and is not in excl=) has different extensiona Rename: Original filename (extension is in masks= and is not in excl=), new name No (extension is in masks= and is not in excl=)a NOTE: masks= and excl= are defined in the viruschecker.conf file. The masks= is set to *.* and the antivirus engine is configured to scan all files. a. If masks=*.*, renames will not trigger scanning. If the masks option does not equal *.* (that is, *.exe, *.bat), then a trigger will occur. NOTE: When virus checking is enabled, two clients cannot concurrently write to the same file. The first client that requests the file opens the file for write access. The second client must wait until the file is closed by the first client, and, if the first client modified the file, until the file is checked by the AV machines. Configuring viruschecker.conf The viruschecker.conf file defines virus-checking parameters for each VNX Data Mover or Unity NAS server in the domain. For CAVA to work properly, some parameters, such as the addr parameter, must be configured. Other parameters are optional and you can configure them if you want to control the scope and style of the virus scanning. This guide describes only the command-line procedures. In a Windows Server environment, you can also use the Dell Unity/VNX/VNXe NAS Management snap-in to modify the antivirus agent parameters on the Data Mover or NAS Server. EMC Unity/VNX/VNXe NAS Management is installed as an MMC snap-in to Unisphere. Installing Management Applications on VNX for File provides instructions on installing the snap-in. Create and edit viruschecker.conf For Unity systems, you can either retrieve the configuration file in Unisphere and edit it, or you can upload a configuration file that you create offline. The antivirus configuration is found in Unisphere at Storage > File > NAS Servers > Properties > Security > Antivirus. For VNX systems, ensure that the viruschecker.conf file resides in the /.etc directory on the Data Mover before editing. You can either create a new viruschecker.conf file or retrieve the existing viruschecker.conf file and edit the contents: ● If the viruschecker.conf file exists in the /.etc directory, type the following command to retrieve this file for editing: $ server_file -get viruschecker.conf viruschecker.conf ● If the viruschecker.conf file does not exist in the /.etc directory, copy the template viruschecker.conf file from the /nas/sys directory on the Control Station to another directory, such as /nas/site for editing with a text editor. 64 Unity and VNX CAVA Information

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84

Table 12. Scanning quick glance chart
On the Data Mover/NAS server
Does scanning occur
Read a file (scan-on-first-read)
Yes
Move or copy a file
Yes
Create and save a file
Yes
Modify and close a file
Yes
Restore from a backup, only if it needs to restore a file (write)
Yes
Rename: New name (extension is not in
masks=
and is in
excl=
)
a
No
Rename: Original filename (extension is not in
masks=
and is not in
excl=
), new
name (extension is not in
masks=
and is not in
excl=
) has same extension
a
No
Rename: Original filename (extension is not in
masks=
and is not in
excl=
), new
name (extension is in
masks=
and is not in
excl=
) has different extension
a
Yes
Rename: Original filename (extension is in
masks=
and is not in
excl=
), new name
(extension is in
masks=
and is not in
excl=
)
a
No
NOTE:
masks=
and
excl=
are defined in the
viruschecker.conf
file. The
masks=
is set to *.* and the antivirus
engine is configured to scan all files.
a.
If masks=*.*, renames will not trigger scanning. If the masks option does not equal *.* (that is, *.exe, *.bat), then a
trigger will occur.
NOTE:
When virus checking is enabled, two clients cannot concurrently write to the same file. The first client that requests
the file opens the file for write access. The second client must wait until the file is closed by the first client, and, if the first
client modified the file, until the file is checked by the AV machines.
Configuring viruschecker.conf
The
viruschecker.conf
file defines virus-checking parameters for each VNX Data Mover or Unity NAS server in the
domain. For CAVA to work properly, some parameters, such as the
addr
parameter, must be configured. Other parameters are
optional and you can configure them if you want to control the scope and style of the virus scanning.
This guide describes only the command-line procedures. In a Windows Server environment, you can also use the Dell
Unity/VNX/VNXe NAS Management snap-in to modify the antivirus agent parameters on the Data Mover or NAS Server.
EMC Unity/VNX/VNXe NAS Management is installed as an MMC snap-in to Unisphere.
Installing Management Applications on
VNX for File
provides instructions on installing the snap-in.
Create and edit viruschecker.conf
For Unity systems, you can either retrieve the configuration file in Unisphere and edit it, or you can upload a configuration file
that you create offline. The antivirus configuration is found in Unisphere at
Storage
>
File
>
NAS Servers
>
Properties
>
Security
>
Antivirus
.
For VNX systems, ensure that the
viruschecker.conf
file resides in the
/.etc
directory on the Data Mover before
editing. You can either create a new
viruschecker.conf
file or retrieve the existing
viruschecker.conf
file and edit the
contents:
If the
viruschecker.conf
file exists in the
/.etc
directory, type the following command to retrieve this file for editing:
$ server_file
<movername>
-get viruschecker.conf viruschecker.conf
If the
viruschecker.conf
file does not exist in the
/.etc
directory, copy the template
viruschecker.conf
file
from the
/nas/sys
directory on the Control Station to another directory, such as
/nas/site
for editing with a text
editor.
64
Unity and VNX CAVA Information