Vpolicy

Vpolicy

Vpolicy is an interface (a.k.a. vscan), also based on DCE/RPC, that was developed at Network Appliance as a means of doing on-access virus scanning without tying the system to one anti-virus (AV) package or vendor. So far, several leading antivirus vendors have modified their products to provide vscan services for filers.

Using vpolicy is simple, and similar to the fpolicy interface. At present, only CIFS file requests are processed, and execution requires backup operator privilege on the filer.

The vpolicy interface is not at present included in the SDK, but it is freely available to members of the Advantage Developer program who are developing virus scanning capabilities. Please contact the Developer Advantage program (details here) by sending email to AdvantageDeveloper@netapp.com if you have virus scanning requirements and need access to this interface.

Vpolicy is a simple RPC-based mechanism. The sequence of operations looks like this:

(1) Vpolicy server registers with filer (future: multiple policies allowed)

(2) Filer sends RPC with path and file info to vpolicy server upon client file requests:

(3) Server checks for file extension and optionally opens file via fopen() or equivalent and scans for virus signatures

(4) Server rewrites/deletes file if desired.

(5) Server returns success or failure

(6) Filer denies access on failed return, allows access on success