Setting up and starting virus scanning
About virus-scanning clients
The commercial virus-scanning software compliant with Data ONTAP runs on selected PC clients with "Backup Operator" or higher user privilege connections to the target storage systems.
During installation of the commercial virus scan software on the selected PCs, you indicate the Data ONTAP storage systems to scan for viruses. Once the relationship is set up, the PCs running the virus scan software act as special virus-scanning clients that will virus scan files that are being opened by other CIFS clients and, if necessary, block the file operations and send a virus detection warning message to the requesting CIFS client.
Specifying the active virus-scanning clients
To set up PC clients as virus-scanning clients, complete the following steps.
Step
|
Action
|
|---|
|
1
|
If you have not already done so, obtain a Data ONTAP-compliant virus scan software.
|
|
2
|
Make sure that the operators of the PC clients that you want to configure as virus-scanning clients are configured as "Backup Operators" or higher on the systems on which they will conduct virus scanning.
|
|
3
|
Install the Data ONTAP-customized commercial virus scan software on the PCs that you want to configure as virus-scanning clients. Follow the directions that accompany the virus scan software product.
|
|
4
|
After installation and configuration of the virus scan software on the PCs is complete, confirm the success of the installation by listing the IP addresses of the PCs now configured as virus-scanning clients. At the system console enter the following command:
vscan scanners
Result
The system displays a table listing the IP addresses of the active virus-scanning clients for this storage system.
|
|
5
|
Leave the virus-scanning client on and connected to the storage system(s) on which it is carrying out its virus scan operations.
|
Enabling and disabling virus scanning
To enable and disable virus scanning, complete the following step.
Step
|
Action
|
|---|
|
1
|
Enter the following command:
vscan on [-f][on|off]
-f forces virus scanning to be enabled even if no virus-scanning clients are available to scan files.
|
Designating secondary scanning clients
If you have more than one virus-scanning client configured to scan files on a storage system, you can use the vscan scanners secondary_scanners command line to designate one or more of the virus-scanning clients as standby virus scanners. Standby virus scanners do not actively scan for viruses unless the other virus-scanning clients go down. At that point the secondary scanners take over the virus-scanning operation.
To set up secondary virus scanning, complete the following steps.
Step
|
Action
|
|---|
|
1
|
List the virus-scanning clients configured to scan on this system. In the system console enter the following command:
vscan scanners
Example:
>vscan scanners
Virus scanners(IP and Name) P/S ...
----------------------------------------
132.132.59.12 \\XLAB-WTS Pri ....
|
|
2
|
Specify, by IP address, the PC clients you want to serve as standby virus scanners by entering the following command:
vscan scanners secondary_scanners
scanner_ip[,scanner_ip...]
scanner_ip can be either of the following:
Example
vscan scanners secondary_scanners 132.132.59.14
|
|
3
|
Use the vscan scanners command to confirm your configuration.
Example
>vscan scanners
Virus scanners(IP and Name) P/S ...
----------------------------------------
132.132.59.14 \\BORIS-PC Sec ...
132.132.59.12 \\XLAB-WTS Pri ....
Secondary scanners IP address list
132.132.59.14,10.20.30.40
Note
In this example, the address 10.20.30.40 belongs to a PC that is enabled as a standby scanner but is not turned on; therefore it is not listed in the Virus scanners (IP and Name) table, but it is listed in the Secondary scanners IP address list.
|
Copyright © 1994-2005, Network Appliance, Inc. All rights
reserved.
Part No. 210-01081_B0
File: vscan3.htm
Last updated: 01-Dec-2005 16:36:30