Enabling virus scanning on the storage server

Antivirus Administration Guide for Hitachi NAS Platform

Version
14.6.x
Audience
anonymous
Part Number
MK-92HNAS004-24

If virus scanning is enabled and configured for the global context or for the EVS hosting the file system pointed to by the share, then when the share is created, virus scanning is enabled by default. If virus scanning is not enabled for the global context or for the EVS hosting the file system pointed to by the share, then when the share is created, virus scanning is not enabled by default, but you can enable it on a per-EVS basis. To do this, select Enable Virus Scanning on the CIFS Share Details page (Home > File Services > CIFS Shares > CIFS Share Details).

  1. Navigate to Home > Data Protection > Virus Scanning to display the Virus Scanning page.


    Field/Item Description
    EVS Displays the EVS to which this page applies. Click change to select a different EVS.
    Mode Indicates the virus scan mode.
    Virus Scanning Indicates whether virus scanning is enabled or disabled for the selected EVS. Click enable to enable virus scanning. Virus scanning can be suspended at any time by selecting the disable button. If virus scanning services are resumed later, any file that has changed while virus scanning services were disabled, will be scanned the next time they are accessed by a CIFS client.
    Tip: Virus scanning can be disabled on individual CIFS shares by clearing the Enable Virus Scanning check box in the Add Shares page (File Services > CIFS Shares > Add Share) or the CIFS Share Details page (File Services > CIFS Shares > CIFS Share Details).
    Note: For virus scanning to be enabled, it is important that at least one virus scan engine is listed in the Registered Virus Scan Engines table on this page.
    Scan All File Types Scans all file types, regardless of those defined in the File type to scan list.
    Scan Files With Extension Scans specific file types, and ensure that the list of file types contains the appropriate file extensions. The default list includes most files commonly affected by viruses. To add a file type to scan, enter the file extension in the field, and click Add. To delete a file type from the list, select the file type, and click X. To revert to the original list of files to scan, select restore defaults.
    Note: When you choose to limit the scan to specific file types, only the file types you include in the list are scanned; file types not listed are not scanned.
    restore defaults Restores the file extension list to the default.
    apply Saves any changes.
    Registered Virus Scan Engines Lists the virus scan engines configured for the current EVS.
    Scan Engine The virus scan engine configured for the current EVS.
    Port The port used by the scan engine.
    Service Name Dependent on the scan engine used, for example SYMCScanResp-AV or AVSCANRESP.
    Enabled Whether the scan engine is enabled or disabled.
    Status
    • Green: OK: The Scan Engine IP address is valid.
    • Red: Not Responding: an invalid IP address was entered in the Scan Engine field.
    • Grey: Virus scanning is Disabled.
    Actions
    • add opens the Add Scan Engine page.
    • delete deletes the selected virus scan engine.
    • enable enables the selected virus scan engine.
    • disable disables the selected virus scan engine.
    Request Full Scan Each file is rescanned on next access - even if the file had previously been marked as clean.
    Switch to ICAP mode/Switch to RPC mode Changes the virus scan mode.
  2. Select the Virtual Server (EVS) on which to enable virus scanning.
    CAUTION:
    It is important that at least one virus scan engine is listed in the Registered Virus Scanners table. The account used to start the scanning services on the virus scan engine must be added to the server’s Backup Operators Local Group. If the account used to start the antivirus service is not a member of the Backup Operators Local Group, the antivirus engine will not be registered and will not be displayed on the Virus Scanning page in NAS Manager. If you try to enable virus scanning when no virus scanners have been registered, the SMU restricts the action; virus scanning cannot be enabled when there are no registered virus scanners.
  3. Click enable next to the Enable Virus Scanning field to enable scanning.
    Virus scanning can be disabled on individual CIFS shares by unchecking the Enable Virus Scanning box in the Add Shares page (File Services > CIFS Shares > Add Share).
  4. Optionally, modify the list of files to be scanned:
    • To scan all file types regardless of those in the list, select Scan All File Types. It is advisable to select this option while compiling your list of file types to scan.
    • To add a file type to scan, click the Scan Files With Extensions radio button, enter the file extension in the field below it, then click Add.
    • To delete a file type, select it from the list, and click the X.
    • To revert back to the original default list of files types to scan, click restore defaults.
      CAUTION:
      The default list of file extensions contains the most commonly used file types. Contact your antivirus software vendor for an up-to-date list of file types that should be included for scanning, and to modify the your file extension list accordingly. It is your responsibility to choose the file types you include for scanning. Based on your needs, the antivirus software used, and the recommendations of the antivirus software manufacturer, choose the file types you want to include in the antivirus scanning; types not listed will not be scanned.

    The default file extension list is as follows:

    ACE, ACM, ACV, ACX, ADT, APP, ASD, ASP, ASX, AVB, AX, BAT, BO, BIN, BTM, CDR, CFM, CHM, CLA, CLASS, CMD, CNV, COM, CPL, CPT, CPY, CSC, CSH, CSS, DAT, DEV, DL, DLL, DOC, DOT, DVB, DRV, DWG, EML, EXE, FON, GMS, GVB, HLP, HTA, HTM, HTML, HTT, HTW, HTX, IM, INF, INI, JS, JSE, JTD, LIB, LGP, LNK, MB, MDB, MHT, MHTM, MHTML, MOD, MPD, MPP, MPT, MRC, MS, MSG, MSO, MP, NWS, OBD, OBT, OBJ, OBZ, OCX, OFT, OLB, OLE, OTM, OV, PCI, PDB, PDF, PDR, PHP, PIF, PL, PLG, PM, PNF, PNP, POT, PP, PPA, PPS, PPT, PRC, PWZ, QLB, QPW, REG, RTF, SBF, SCR, SCT, SH, SHB, SHS, SHT, SHTML, SHW, SIS, SMM, SWF, SYS, TD0, TLB, TSK, TSP, TT6, VBA, VBE, VBS, VBX, VOM, VS?, VSD, VSS, VST, VWP, VXD, VXE, WBT, WBK, WIZ, WK?, WML, WPC, WPD, WS?, WSC, WSF, WSH, XL?, XML, XTP, 386

  5. If a virus scanner has been disabled for some reason, you can re-enable its usage by filling the check box next to the name of the disabled virus scanner and clicking the enable button in the Actions area.
  6. Verify your settings, and click apply to save.