McAfee NAPCKE-AB-AA - VirusScan For NetApp Bedienungsanleitung PDF herunterladen (Seite 5)

How to Configure McAfee VirusScan Enterprise for the Oracle ZFS Storage Appliance

While a request to scan a file is being fulfilled by the ICAP server, access to the file is

denied. The user privileges defined in the access control list (ACL) for the file are

irrelevant as long as the Oracle ZFS Storage Appliance is waiting for the ICAP server to

respond.

When the virus scan engine reports a file to contain a virus, the VSCAN service sets the

av_quarantined bit in the Extended System Attributes (ESA) of the file. This prevents any

further client access to the file.

Note: To avoid data becoming unavailable when a virus scan engine does not respond to

ICAP requests, best practice is to configure the VSCAN service to use of at least two virus

scan engines.

An ICAP server does not require registration or authentication with the Oracle ZFS

Storage Appliance to serve scan requests.

Figure 1 shows the interaction between an ICAP client and an ICAP server when a NAS

client requests access to data on a virus-protected share of the Oracle ZFS Storage

Appliance. The workflow comprises seven steps initiated by a request from the NAS client

to access a file on a shared volume using NSFv4 or CIFS protocol.

Figure 1. File virus scan steps

The following sequence of steps is followed when a file is accessed/created by a client on

an NFS/CIFS file share when using a McAfee antivirus scan engine.

1. The client accesses the file.

2. The Oracle ZFS Storage Appliance determines, using scanstamp information and

file open or close operation requests, if the file need to be scanned. If no scan is

needed (the file was scanned before and no updates made), the client is granted

access and contents are returned.

1 2 3 4 5 6 7 8 9 10 ... 20 21

Keine Kommentare

McAfee NAPCKE-AB-AA - VirusScan For NetApp Bedienungsanleitung Seite 5