Setting up and starting virus scanning

About virus-scanning clients

The commercial virus-scanning software compliant with Data ONTAP runs on selected PC clients with "Backup Operator" or higher user privilege connections to the target filers.

During installation of the commercial virus scan software on the selected PCs, you indicate the Data ONTAP filers to scan for viruses. Once the relationship is set up, the PCs running the virus scan software act as special virus-scanning clients that will virus scan files that are being opened by other CIFS clients and, if necessary, block the file operations and send a virus detection warning message to the requesting CIFS client.

Specifying the active virus-scanning clients

To set up PC clients as virus-scanning clients, complete the following steps.

Step	Action
1	If you have not already done so, obtain Network Appliance-compliant virus scan software described in Obtaining Network Appliance-compliant anti-virus software.
2	Make sure that the operators of the PC clients that you want to configure as virus-scanning clients are configured as "Backup Operators" or higher on the filers on which they will conduct virus scanning.
3	Install the NetApp-customized commercial virus scan software on the PCs that you want to configure as virus-scanning clients. Follow the directions that accompany the virus scan software product.
4	After installation and configuration of the virus scan software on the PCs is complete, confirm the success of the installation by listing the IP addresses of the PCs now configured as virus-scanning clients. At the filer console enter the following command: vscan scanners Result The system displays a table listing the IP addresses of the active virus-scanning clients for this filer.
5	Leave the virus-scanning client on and connected to the filer or filers on which it is carrying out its virus scan operations.

Enabling and disabling virus scanning

To enable and disable virus scanning, complete the following step.

Step	Action
1	Enter the following command: vscan on [-f][on\|off] `-f` forces virus scanning to be enabled even if no virus-scanning clients are available to scan files.

Designating secondary scanning clients

If you have more than one virus-scanning client configured to scan files on a filer, you can use the vscan scanners secondary_scanners command line to designate one or more of the virus-scanning clients as standby virus scanners. Standby virus scanners do not actively scan for viruses unless the other virus-scanning clients go down. At that point the secondary scanners take over the virus-scanning operation.

To set up secondary virus scanning, complete the following steps.

Step	Action
1	List the virus-scanning clients configured to scan on this filer. In the filer console enter the following command: vscan scanners Example: >vscan scanners Virus scanners(IP and Name) P/S ... ---------------------------------------- 132.132.59.12 \\XLAB-WTS Pri ....
2	Specify, by IP address, the PC clients you want to serve as standby virus scanners by entering the following command: *`vscan scanners secondary_scanners`scanner_ip`[,`scanner_ip`...]`* scanner_ip can be either of the following: IP addresses of one or more of the configured virus-scanning clients displayed in Step 1 IP addresses of PCs not yet configured as a virus-scanning client. Note If the IP address you entered belongs to a PC not yet configured as a virus-scanning client for this filer, you must configure it for this setting to take effect. Example vscan scanners secondary_scanners 132.132.59.14
3	Use the `vscan scanners` command to confirm your configuration. Example >vscan scanners Virus scanners(IP and Name) P/S ... ---------------------------------------- 132.132.59.14 \\BORIS-PC Sec ... 132.132.59.12 \\XLAB-WTS Pri .... Secondary scanners IP address list 132.132.59.14,10.20.30.40 Note In this example, the address 10.20.30.40 is the address of a PC that is enabled as a standby scanner but is not turned on; therefore it is not listed in the Virus scanners (IP and Name) table, but it is listed in the Secondary scanners IP address list.

Step

Action

List the virus-scanning clients configured to scan on this filer. In the filer console enter the following command:

vscan scanners

Example:

>vscan scanners

Virus scanners(IP and Name)      P/S ...

----------------------------------------

132.132.59.12   \\XLAB-WTS      Pri ....

Specify, by IP address, the PC clients you want to serve as standby virus scanners by entering the following command:

vscan scanners secondary_scanners 
scanner_ip[,scanner_ip...]

scanner_ip can be either of the following:

IP addresses of one or more of the configured virus-scanning clients displayed in Step 1
IP addresses of PCs not yet configured as a virus-scanning client.
Note
If the IP address you entered belongs to a PC not yet configured as a virus-scanning client for this filer, you must configure it for this setting to take effect.

Example

vscan scanners secondary_scanners 132.132.59.14

Use the vscan scanners command to confirm your configuration.

Example

>vscan scanners

Virus scanners(IP and Name)      P/S ...

----------------------------------------

132.132.59.14   \\BORIS-PC      Sec ...

132.132.59.12   \\XLAB-WTS      Pri ....

Secondary scanners IP address list

132.132.59.14,10.20.30.40

Note
In this example, the address 10.20.30.40 is the address of a PC that is enabled as a standby scanner but is not turned on; therefore it is not listed in the Virus scanners (IP and Name) table, but it is listed in the Secondary scanners IP address list.

Setting up and starting virus scanning

About virus-scanning clients

Specifying the active virus-scanning clients

Result

Enabling and disabling virus scanning

Designating secondary scanning clients

Example:

Example

Example