man1/na_vscan(1) manual page

NAME

na_vscan - control virus scanning for files on the filer

SYNOPSIS

vscan

vscan extensions { include | exclude } [ reset | set ext_list | add ext-list | remove ext-list ]

vscan [ on [-f] | off ]

vscan options timeout [ reset | set <value> ]

vscan options mandatory_scan [ on | off ]

vscan options use_host_scanners [ on | off ]

vscan options client_msgbox [ on | off ]

vscan reset

vscan scanners [stop scanner-IP-address | secondary_scanners [ scanner-IP-address [, scanner-IP-address ]]]

DESCRIPTION

The vscan command allows for control and configuration of virus scanning for files on the filer.

USAGE

vscan
Displays vscan settings and provides summary information about scan requests. This information includes

-: Whether virus scan is enabled or disabled

-: A list of virus scanners that are currently connected to the filer. The list contains the IP address and the name of the virus scanner, if the scanner is a primary or secondary, the length of time the scanner has been connected to the filer, the number of requests serviced by the scanner and how many failures were reported by the scanner. Note, this information is reset when a scanner disconnects and then reconnects again.

-: A list of file extensions that will cause the filer to request a scan.

-: A list of file extensions that are specifically exempt from scanning.

-: The total number of files that have been scanned since vscan was last enabled

-: The number of scan failures that have been reported. Failures include scans which have detected viruses, scan requests which timed out and client requests which would normally trigger a scan but for which no scanners were available

The counts for a scanner are set to zero when it connects (or reconnects) to the filer. The vscan totals and counts for each scanner are zeroed when vscan is enabled. This occurs, for example, when the filer boots, when cifs is restarted, or when the command `vscan on' is entered on the filer console. Because of this, the overall filer totals will not necessarily match the totals obtained by adding the values for the scanners.

vscan extensions { include | exclude } [ reset | set ext_list | add ext-list | remove ext-list ]
ext-list is a comma separated list of three-letter file extensions. The include list determines if a given file should be scanned for viruses. The exclude list determines if a given file should not be scanned for viruses. If an extension is listed on both the exclude and the include list, then files with that extension are not scanned for viruses. If an extension is not listed on either the include list or the exclude list, then files with that extension are not scanned for viruses. The character ? is a wild card. It matches any single character or no character. For example, putting C?? into the extension list would cause the filer to scan the files ABC.C, ABC.CPP, ABC.C++ and so on. Usage of
vscan extensions command ext-list
has been deprecated. Instead, please use vscan extensions include command ext-list

vscan extensions { include | exclude } Displays the current file extension list.

vscan extensions { include | exclude } reset Restores the file extension list to a default list provided by Network Appliance.

vscan extensions { include | exclude } set ext-list Specifies a new extension list which replaces the current list.

vscan extensions { include | exclude } add ext-list Adds new entries to the current file extension list.

vscan extensions { include | exclude } remove ext-list Removes entries from the current file extension list.

vscan [ on [-f] | off ]
Enables/disables on-access virus scanning for files on the filer. The f flag forces virus scanning to be enabled even if there are no scanning clients available to scan files for the filer.

vscan options
Displays the current values of the virus scan options.

vscan options timeout [ reset | set <value> ] Displays the current virus scan timeout value in seconds. This value determines how long the filer will wait for the scanning client to perform a virus scan request. The timeout value may be reset to a NetApp-provided default value. It is also possible to set the timeout.

vscan options mandatory_scan [ on | off ] Displays the current setting for the mandatory_scan option. If set to "on", then access to files will be denied if a virus scan cannot be performed, for example because no scanners are available. If this option is set to "off" then access to files is allowed if it is not possible to scan the file.

vscan options use_host_scanners [ on | off ] Displays the current setting for the use_host_scanners option. If set to "on", then vfilers will be allowed to use scanning clients which are registered with the hosting filer. If this option is set to "off" then a vfiler can only use scanning clients which have registered to the vfiler's IP address.

vscan options client_msgbox [ on | off ] Displays the current setting for the client_msgbox option. If set to "on", the filer will attempt to send a pop-up MsgBox to the opener of an infected file.

vscan reset
Discards cached information of files that have been successfully scanned.

vscan scanners [stop scanner-IP-address | secondary_scanners [ scanner-IP-address [, scanner-IP-address ]]] Displays a list of scanning clients which have offered to scan files for the filer, or terminates the connection to a specified scanning client, or specifies which scanning client(s) should be classified as secondary scanners. Secondary scanners are not used by the filer to perform scans unless there are no primary scanners available.

EXAMPLE

  Filer1> vscan
  Virus scanning is enabled.
  Virus scanners(IP and Name)      P/S Connect time (dd:hh:mm)  Reqs    Fails
  ----------------------------------------------------------------------------
   100.400.100.10     \C5-4          Pri    00:00:45               138       1
   102.101.100.99     \CCOLIN-WIN2K  Pri    00:00:32               120       0

List of extensions to scan:
ARJ,ASP,BAT,BIN,DOC,DOT,DRV,EXE,INI,SYS,VBS

List of extensions not to scan:
Extensions-not-to-scan list is empty.

Number of files scanned: 158

Number of scan failures: 1

VFILER CONSIDERATIONS