Dell VNX5600 Using the Common Event Enabler 8.x on Windows Platforms
Dell VNX5600 Manual
View all Dell VNX5600 manuals
Add to My Manuals
Save this manual to your list of manuals |
Dell VNX5600 manual content summary:
- Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 1
Dell EMC CEE Using the Common Event Enabler on Windows Platforms Version 8.x Part Number: 302-002-456 March 2022 Rev. 11 - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 2
of your product. CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. WARNING: A WARNING indicates a potential for property damage, personal injury, or death. © 2011 - 2022 Dell Inc. or its subsidiaries. All rights reserved. Dell - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 3
Introduction...8 About CEE...8 System requirements...9 AntiVirus partners...9 Support for third-party applications ...10 Restrictions...10 Related information...11 Chapter 2: Installing Third-Party Application Antivirus Engines 12 Installation overview...12 Computer Associates eTrust...13 F-Secure - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 4
Splunk...49 Chapter 10: Monitoring and Sizing the Antivirus Agent 51 Install the CAVA Calculator...51 Start the CAVA Calculator...52 Uninstall the CAVA Calculator...52 Configure the sizing tool...52 Enable the sizing tool...53 Manually compile the cava.mof file...53 Create the cavamon.dat file...53 - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 5
Troubleshooting...57 Dell EMC E-Lab Interoperability Navigator...57 Error messages...57 Known problems...57 Training and Professional Services after definition file update (manual process 61 Virus-checking the viruschecker.conf file...71 Verify the installation...72 Appendix B: Unity and VNX CEPA - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 6
Index...82 6 Contents - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 7
For documentation, release notes, software updates, or for information about products, licensing, and service, go to Online Support (registration required) at https://www.dell.com/support. Troubleshooting Go to Online Support. After logging in, search for the applicable Product page. Preface 7 - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 8
facilities for auditing, content/quota management (CQM), Common Asynchronous Publishing Service (VCAPS), and indexing CAVA provides an antivirus solution for Dell the exchange from which it can retrieve events. NOTE: RabbitMQ is supported only for Dell EMC Unity and VNX systems running CEE version - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 9
Server 2012 Windows 8 and Windows Server 2012 install and enable by default the .NET Framework 4.5. However, the CEE Framework, cava.exe, is a .NET Framework 3.5 service. You must enable .NET Framework 3.5. The Microsoft website contains instructions on enabling the .NET Framework 3.5 on Windows - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 10
Event Enabler Release Notes provide the latest list of supported AV engines and versions. Installing Third-Party Application Antivirus Engines contains further information about supported third-party antivirus software. Support for third-party applications CEPA provides event notifications and - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 11
● Symantec Endpoint Protection documentation ● Trend Micro ServerProtect for EMC documentation Use of the term Windows Server Unless otherwise noted in this guide, the term "Windows Server" refers to the following versions: ● Windows Server 2008 R2 ● Windows Server 2012 ● Windows Server 2012 R2 - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 12
participating AV machine before installing CAVA (as part of CEE). Installing the Common Event Enabler contains instructions on installing CEE. NOTE: All packages except Trend Micro ServerProtect must be installed prior to installing CAVA (as part of CEE). Install Trend Micro ServerProtect provides - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 13
on VNX Data Movers or Unity NAS Managing the VC Client servers. 4. Verify the CAVA installation. Verify the installation Computer Associates eTrust About this task Steps 1. Install the eTrust application on an AV machine to interface with CAVA. Computer Associates documentation provides - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 14
and documented. NOTE: The settings under NTFS File System are optional. 9. Click OK to save the changes. Go to Installing the Common Event Enabler (to install CAVA as part of CEE). F-Secure AntiVirus The necessary configuration options for using F-Secure AntiVirus with CAVA are incorporated into - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 15
Kaspersky Anti-Virus for Windows Servers Enterprise Edition on a server that will interface with the AV machine. Kaspersky documentation provides specific installation steps. 2. Open the Kaspersky Anti-Virus MMC Console. 3. In the left pane, select Real-time protection and then Real-time file - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 16
if scan takes longer than (sec) and Do not scan compound objects larger than (MB), and select use iChecker technology and use iSwift technology. 16 Installing Third-Party Application Antivirus Engines - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 17
the scheduling options. 12. Click OK to close the Real-time file protection Properties dialog box. 13. Close the Kaspersky Anti-Virus program. Go to Installing the Common Event Enabler (to install CAVA as part of CEE). Installing Third-Party Application Antivirus Engines 17 - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 18
McAfee VirusScan version 8.8 or later, read McAfee's KnowledgeBase article for instructions on how to prevent this condition. Steps 1. Create a temporary directory files into that directory. McAfee documentation provides specific installation steps. 2. Install and start the application. NOTE: If you - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 19
's Windows Update. 2. After installation, verify that Microsoft Antimalware Client Version 1.522.0 or later is running. If it is not running, contact Microsoft Support. 3. Install CEE/CAVA (v6.0.0 or later). Go to Installing the Common Event Enabler. Installing Third-Party Application Antivirus - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 20
Version 1.522.0 or later is running. If it is not running, contact Microsoft Support. 3. Install CEE/CAVA (v6.0.0 or later). Go to Installing the Common Event Enabler. Sophos Anti-Virus About this task Steps 1. Install Sophos Anti-Virus on a server that will interface with the AV machine. Sophos - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 21
virus/spyware. Select Delete to delete items that cannot be cleaned up. 8. Click OK to close the dialog box. 9. Close the Sophos program. Go to Installing the Common Event Enabler. Installing Third-Party Application Antivirus Engines 21 - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 22
(or later) for Symantec Endpoint Protection versions 11.04, 11.06, and 12.1: Steps 1. Install the Symantec Endpoint software. The Symantec documentation provides specific installation steps. 2. Open the Windows Registry Editor and navigate to: ● For 32-bit operating systems: HKEY_LOCAL_MACHINE - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 23
change the Symantec Protection Engine service from SYSTEM to the same user that is running CAVA, otherwise access problems can result. Domain user account overview provides more information about configuring the domain user and assigning access rights. Steps 1. Install the Symantec Protection Engine - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 24
on the VNX Data Movers Configuring viruschecker.conf or Unity NAS servers. 3. Install CAVA (as part of CEE) on the Windows AV machines. Installing the Common Event Enabler 4. Install the Trend AV engine. Install Trend Micro ServerProtect 5. Start the virus-checking client on the VNX Data - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 25
Trend Micro ServerProtect Prerequisites Trend Micro ServerProtect must be installed after installing CAVA. Installing the Common Event Enabler provides instructions on installing CAVA as part of CEE. If CAVA is not installed on the ServerProtect target AV machine, you will receive this server - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 26
Figure 1. Trend Micro ServerProtect Real-time Scan options window 26 Installing Third-Party Application Antivirus Engines - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 27
the Common Event Enabler Framework Topics: • Install CEE • Verifying the CEE installation package • Complete the CEE installation for Windows Server • Uninstall CEE Install CEE Prerequisites ● Download the CEE framework software from Online Support: 1. Open a browser window, and go to Online - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 28
of InstallShield, the License Agreement window appears. Go to step 7. ● If you do not have the most current version of InstallShield, you are prompted to install it. Go to step 4. 4. Click Next. 5. On the Location to Save Files window, click Next. NOTE: Do not change the location of the temporary - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 29
installation for Windows Server About this task Steps 1. From the Windows taskbar, click Start and select Settings > Control Panel > Administrative Tools > Services. 2. Double-click EMC CAVA in the Service service. Start, stop, and restart CAVA provides instructions on using the EMC CAVA services. - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 30
a VNXe System with CIFS Shared Folders on Online Support. Topics: • Domain user account overview • Determine or NAS Server, and run the EMC CAVA service in this user context. Overview of configuring the Installing Management Applications on VNX for File provides installation instructions. 30 - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 31
Determine the interface name on the Data Mover About this task This procedure is valid for VNX systems only. You must identify the CIFS interface for the Data Mover before you create a local group on a Data Mover. Frequently, a Data Mover is configured with more than one CIFS interface. If this is - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 32
create a domain user account on the Windows domain controller. The EMC CAVA service is running in the context of this user. Use one of the following context-appropriate name. The name virususer is used as an example in this guide. b. Click Next. The Password dialog box appears. 5. In the Password - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 33
in Create a local group on each Data Mover/NAS Server. NOTE: When using CEE/CAVA with PowerScale systems, the user in which the cava.exe service is running must have access to the CHECK$ share on the PowerScale NAS Server. Refer to the appropriate PowerScale OneFS documentation for details on - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 34
1. Click Start and select Settings > Control Panel > Administrative Tools > EMC Unity VNX VNXe NAS Management. NOTE: Installing Management Applications on VNX for File provides information on installing MMC snap-ins and ADUC extensions. 2. Perform one of the following: ● If a Data Mover/NAS Server - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 35
6. Click Add. The Select Users or Groups window appears. 7. In the Select Users or Groups window: a. Select the domain from the Look in: list box. b. Select the AV user account that you created in Create from User Manager for Domains. c. Click Add. d. Click OK to close the Select Users or Groups - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 36
parameters on the Data Mover or NAS Server. Installing Management Applications on VNX for File provides instructions on installing the snap-in. Open the EMC Unity/ snap-in, click Help in the toolbar. NOTE: The SMB/CIFS services must be configured and started on the VNX Data Mover or Unity NAS - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 37
$ server_viruschk server_2 Output: server_2 : 10 threads started 1 Checker IP Address(es): 172.24.101.217 ONLINE at Tue Jan 25 23:29:04 2005 (GMT-00:00) RPC program version: 3 CAVA release: 3.3.5, AV Engine: Network Associates Last time signature updated: Tue Jan 25 23:28:14 2005 (GMT-00:00) 1 File - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 38
a Windows Server by using this procedure: Steps 1. From the Windows taskbar, click Start and select Settings > Control Panel > Administrative Tools > Services. 2. Scroll to EMC CAVA. 3. Right-click EMC CAVA and click Start, and select either Stop, Pause, Resume, or Restart (whichever is appropriate - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 39
Verify the status of a file system scan About this task Steps To verify the status of a scan on a file system, use this command syntax: $ server_viruschk -fsscan -list where: = name of the Data Mover = name of the file system Example: To verify the scan of a - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 40
-on-first-read enabled. NOTE: Currently, McAfee version 8.0i supports automatic detection of virus definition updates. The VNX Operating Environment for . Instructions for retrieving the configuration file on Unity systems are described in Virus-checking continuation. 2. Stop the EMC CAVA service. - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 41
in viruschecker.conf provides more information. Instructions for retrieving the configuration file on modify the maxVCThreads parameter, and then reboot the SPs. Unity Service Commands Technical Notes provides more information on the svc_nas command. Support for more information. Managing CAVA 41 - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 42
When CAVA detects an infected file, it can automatically send notification to the client through Windows pop-up messages when the Windows Messenger service is enabled. For administrators, events are logged in the system log. Use this procedure to enable messaging on a Windows Server: Steps 1. Click - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 43
the default. Each third-party antivirus vendor varies slightly on which type of remediation works with CAVA. Types of remediation lists the types of remediation supported by the third-party vendors. Third-party vendor documentation provides more information. Table 9. Types of remediation Vendor - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 44
server_x> = name of the Data Mover 5. To affect the changes you made to the cifsmsg.txt file, restart (stop and start) the CIFS service on the Data Mover by using this command syntax: $ server_setup -P cifs -o stop $ server_setup -P cifs -o start where: = name of the - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 45
the Windows Server Registry can cause serious problems that require a reinstallation of the operating supported AgentType is driver. This option allows for future support driver is properly configured: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EMCVirCk The correct settings for the EMC AV - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 46
Steps 1. From the Windows taskbar, click Start and select Settings > Control Panel > Administrative Tools > Event Viewer. 2. From the Event Viewer window, select System Log. 3. In the right pane, double-click EMCVirCk in the Event Viewer's System Log list. The Event Properties window appears. 4. - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 47
section of the Registry, except for Verbose and Debug, you need to restart the EMC CAVA service. Steps 1. Open a command window on the machine where CEE and VCAPS are installed and type regedit. 2. On the Windows Registry Editor window, navigate to: HKEY_LOCAL_MACHINE > SOFTWARE > EMC > CEE > CEPP - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 48
supported only for Dell EMC Unity and VNX systems running CEE version 8.8.2.1 and earlier. You must configure CEE to send events to the RabbitMQ server. Steps 1. In the CEE installation Host> 2. Save the MsgSys.xml file. 3. Restart the CEE service. 48 Managing CEE for RabbitMQ - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 49
of the Registry, except for Verbose and Debug, you need to restart the EMC CAVA service. Steps 1. Open a command window on the machine where CEE and the Index application are installed and type regedit. 2. On the Windows Registry Editor window, navigate to: HKEY_LOCAL_MACHINE > SOFTWARE > EMC > CEE - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 50
Results The FeedInterval and MaxEventsPerFeed delivery cadences are used simultaneously. The Index application sends a list of events to the Splunk consumer application, not the actual content of files. 50 Managing Indexing - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 51
10 Monitoring and Sizing the Antivirus Agent You can use the CAVA Calculator to estimate the number of AV machines that are required before installing the antivirus agent. You can also use the CAVA sizing tool to monitor the antivirus agent usage on the network and determine the optimal number - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 52
You need to restart the system to complete the installation. Click Yes to restart immediately or No to AV Enable the sizing tool machines that you want to monitor. 2. Manually compile the cava.mof file used by CEE CAVA. Manually compile the cava.mof file 3. Create the cavamon.dat file on - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 53
supported in Visual Basic. 7. Close the Registry Editor. 8. Restart CAVA, as described in Start, stop, and restart CAVA. Manually manually compile the Managed Object Format (MOF) file used by CEE CAVA. Steps 1. Locate the cava.mof file (found in the wbem directory of the local Windows installation - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 54
sizing tool About this task Steps 1. Restart the EMC CAVA service. 2. From the Program Files\EMC\CEE directory, run AV machines that you want to monitor. ● If you have any problems while running the script, download and install the Windows Script Host (available at https:// www.microsoft.com). 54 - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 55
Mover or NAS server generates events for selected file system activity and sends them to a defined Windows Server that has the CEE installed, which then communicates with the consumer application, requesting a response. Depending on the type of consumer application used, policies can be checked and - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 56
of the remote computers where the consumer application is installed. When setting multiple remote computers, you must use Enable. ● Type either 0 to disable or 1 to enable the CEPA functionality that supports the consumer application being used. 5. Restart the computer. Results NOTE: Any time you - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 57
Support and resolving problems. Topics: • Dell EMC E-Lab Interoperability Navigator • Error messages • Known problems • Training and Professional Services Error Messages Guide: ○ Use this guide to locate information about messages that are in an earlier-release message format. ● Online Support: ○ Use - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 58
11. CEE known problems and workarounds (continued) Known problem Symptom Workaround If Go to Online Support at https://www.dell.com/support for course and registration information. Professional Services can help you your Customer Support Representative for more information. 58 Troubleshooting - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 59
Data Mover or Unity NAS server; a CAVA agent; and a third-party antivirus engine. The CAVA software and a third-party AV engine must be installed on a Windows machine in the domain. CAVA restrictions and limitations The following are known CAVA limitations at the time of publication. AV engines - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 60
storage based on the support environment and interface preferences. This guide describes how to configure instructions on launching Dell EMC Unisphere software, and on installing the MMC snap-ins and the ADUC extensions. For VNX and Dell EMC Unity systems, this document also describes how to manually - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 61
manual process) Load balancing and fault tolerance You can use the CAVA Calculator and the CAVA sizing tool to determine the number of AV machines that the system requires. The CAVA Calculator can help you prior to installation supported third-party anti-virus engines support EMC CAVA service. If the - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 62
on each Data Mover or NAS server. On a VNX, use this command to manually update this file. 1. Store the list of unscanned files by using this command syntax on each AV machine. When you install CAVA on the AV machines, the CAVA sizing tool, cavamon.exe, is also installed. In addition, you can use - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 63
the AV engine, which processes requests from the VC client. Scanning is supported only for SMB/CIFS access. While the scan or other related actions is part of the Unity/VNX/VNXe NAS Management snap-in. (Optional) Install EMC Unity/VNX/VNXe NAS Management snap-in provides more information. Full file - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 64
want to control the scope and style of the virus scanning. This guide describes only the command-line procedures. In a Windows Server environment, you Management is installed as an MMC snap-in to Unisphere. Installing Management Applications on VNX for File provides instructions on installing the - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 65
will send the UNC path of the files to scan. For multiple server installations, the UNCs are sent in a round-robin fashion to all Windows Servers Refer to the Unity Unisphere Command Line Interface User Guide for CLI commands. Instructions for retrieving the configuration file on Unity systems are - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 66
.conf parameters provides a complete list of viruschecker.conf parameters, including mask: Steps 1. Open the viruschecker.conf file using an editor. Instructions for retrieving the configuration file on Unity systems are described in Virus-checking continuation. 2. Locate the masks= entry. 3. Type - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 67
.20.15:192.16.20.16 [2510:0:175:111:0:4:aab:ad2]: : is not supported. [2510:0:175:111:0:4:aab:a6f]:1 92.16.20.17 NOTE: IPv6 addresses should its IP address from this file before shutting down the EMC CAVA service. CIFSserver= (optional) Identifies the interface on the VNX - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 68
Table 13. Parameters in the viruschecker.conf file (continued) Parameter Description Example If the parameter is not given or is equal to 0, it means no file size limitation is set. The file size is in bytes with a 4 GB maximum. highWaterMark= (optional) Edits the highWaterMark parameter. - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 69
Table 13. Parameters in the viruschecker.conf file (continued) Parameter Description CAVA service is running under on the CEE machine. Example Domain\user account: msrpcuser=CEE1\user1 surveyTime= (optional) Specifies the time interval used to scan all AV - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 70
installed and configured the antivirus agent. After the virus checking service has been started, you should verify the installation the cepp.conf or viruschecker.conf files are updated manually: ○ the format for the domain user in Guide provides more information. 70 Unity and VNX CAVA Information - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 71
the virus-checking services. For Unity systems, instructions for retrieving the configuration file to manually update configuration information update the viruschecker.conf file. (Optional) Install EMC Unity/VNX/VNXe NAS Management snap-in provides instructions on using the snap-in. For VNX systems - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 72
server_viruschk server_2 -update Output: server_2 : done Verify the installation About this task Confirm that the virus checking is operating properly . They remain visible until the Data Mover is rebooted or the EMC CAVA service has been restarted. ● Mimic the client access to files on the Data - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 73
define only one CEPA pool. ● For post-events and post-error events, you can define up to three CEPA pools. For VNX systems, you must manually create the cepp.conf file before using CEPA. Create the cepp.conf file provides details. For Dell EMC Unity systems, use Unisphere to create and - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 74
file resides on the VNX Data Mover. To use CEPA, each VNX Data Mover that runs the EMC CAVA service must have a valid cepp.conf file on it or the EMC CAVA service will not start. Examples of cepp.conf Example 1 shows a cepp.conf file that uses one continuous line for most - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 75
& Events > Events Publishing). ● For VNX systems, the cepp.conf file must be defined with the correct syntax to ensure that the EMC CEPA service starts on the Data Mover. Steps 1. Log in to the system with your administrative username and password: login: password: where - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 76
is not supported. service is running under a user called user1, the cepp.conf file entry would be msrpcuser=user1. If user1 is a member of a domain, the entry would be msrpcuser=domain\user1. = name assigned to the set of Windows Servers where the CEE software is installed - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 77
Table 14. Event descriptions (continued) Value Definition OpenFileWrite OpenFileWriteOffline OpenDir FileRead FileWrite CreateFile CreateDir DeleteFile DeleteDir CloseModified CloseUnmodified CloseDir RenameFile RenameDir SetAclFile SetAclDir SetSecFile SetSecDir Sends a notification when a file - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 78
that is part of a domain that the EMC CAVA service is running under on the CEE machine, for example, the Unisphere online help for instructions on editing Events Publishing configuration information NOTE: Installing Management Applications on VNX for File provides information on installing the MMC - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 79
VNX Data Mover or Unity NAS Server. Installing Management Applications on VNX for File contains installation instructions for the MMC snap-in. NOTE: start the CEPA facility, use this command syntax: $ server_cepp -service -start where: = name of the Data Mover Example: To - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 80
: server_2 : CEPP Started Stop the CEPA facility About this task Steps To stop the CEPA facility, use this command syntax: $ server_cepp -service -stop where: = name of the Data Mover Example: To stop the CEPA facility on the Data Mover server_2, type: $ server_cepp server_2 - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 81
pool_name server_required access_checks_ignored req_timeout retry_timeout pool1 yes 0 5000 25000 Display the CEPA facility statistics About this task Steps To display statistics about the CEPA pool, use this command syntax: $ server_cepp -pool -stats -all where: = - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 82
Microsoft System Center 2012 Endpoint Protection 20 Sophos 20 supported 9 Symantec Endpoint Protection 22 Symantec Protection Engine 23 Trend restrictions 59 cavamon.dat file 53 cavamon.vbs file 54 CEE install 27 start service 29 uninstall 29 CEPA display pool information 81 display properties 80 - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 83
scanning criteria, defining 66 scanning quick glance chart 63 server_viruschk 36 service, start 29 services, Messenger 42 set up access to consumer application 55 set up CEE message exchange 48 shutdown parameter 66 signing, install package 28 sizing tool cavamon.dat file 53 enabling 53 starting 54 - Dell VNX5600 | Using the Common Event Enabler 8.x on Windows Platforms - Page 84
Micro ServerProtect AV engine, installing 25 troubleshooting 57 U update virus definition files 61 user interface choices 60 V VC client audit 37 VCAPS 47 verification, install package 28 Virus Checking right viruschk threads 41 viruschk.parameter 42 W Windows Messenger service 42 write, scan on 61
Dell EMC CEE
Using the Common Event Enabler on Windows
Platforms
Version 8.x
Part Number: 302-002-456
March 2022
Rev. 11