
How to Configure McAfee VirusScan Enterprise for the Oracle ZFS Storage Appliance
6
3. The file needs to be scanned; a scan request is issued to the virus scan engine.
4. The virus scan engine scans the file.
5. The virus scan engine responds back to the Oracle ZFS Storage Appliance with
one of the following results:
a) File OK.
b) Virus found; file quarantined.
c) Virus found; file repaired.
Note: this response depends on the Actions setting in the virus scan engine. The
Clean option must be set in order to trigger file repair. For use with the Oracle ZFS
Storage Appliance, set this Action option to 'Continue Scanning'. These settings will
be shown later in this paper in the Best Practices section.
6. The Oracle ZFS Storage Appliance takes one of the associated following actions,
depending on the virus scan engine response:
(for result a): File stored/read.
(for result b): The av_quarantined toggle is set in ESA to deny further client
access.
(for result c): The av_quarantined toggle is set in ESA to deny further client
access. The Oracle ZFS Storage Appliance always sets the affected file in
quarantine when a virus is detected.
7. The Oracle ZFS Storage Appliance responds, for the associated action, to the
client:
(for result a): Client access is allowed.
(for result b): Client access is denied.
(for result c): Client access is denied.
Note: As mentioned earlier, using NSFv3 will not trigger scan requests. However, files
marked as infected cannot be accessed over NFSv3.
Installing VSE and Configuring the Oracle ZFS Storage Appliance
The McAfee Individual Endpoint Product Suite contains McAfee VirusScan Enterprise
(VSE), used in combination with the McAfee VirusScan Enterprise for Storage
(VSESTOR) to create an antivirus scanning solution for the Oracle ZFS Storage
Appliance.
The VSE and VSESTOR components are supported on various Microsoft Windows
platforms. For this paper, a virtual machine running Windows 2003 Server is used.
Kommentare zu diesen Handbüchern