Virus protection for CIFS
- How CIFS virus scanning works
Data ONTAP allows virus-scanning PC clients running a compliant antivirus application to scan files before a CIFS clients is allowed to open it.
- File types scanned by default
Before you create a list of file types to scan, see the list of file types that are scanned by default. The list of default file types might include all the file types you want to scan, it might nearly be good enough if you add or remove some file types, or you might want to create a smaller list for faster access.
- Setting up and starting virus scanning
You set up one or more virus-scanning clients to ensure that files on your storage system are virus-free.
- Specifying file types to be scanned
If the default list of file types to be scanned is not inclusive enough or you plan to use an exclusion list in conjunction with the inclusion list, you can modify the list of file types to be scanned.
- Excluding file types to be scanned
You might prefer to specify what files types to exclude, rather than include, in a virus scan because of the proliferation of new file types (with new file name extensions) that might be stored on the storage system.
- Using an inclusion list in combination with an exclusion list
Because of the proliferation of new file types, you can allow any file types that you consider to be safe to go unscanned and at the same time ensure that any new, unfamiliar file type stored on the system does get scanned.
- Specifying shares for scanning
You can turn off virus scanning for files in a share if the share is used only by trusted users, the files are restricted to read-only mode, or speed of access is more important than safety.
- Displaying the scanner list
You can determine if scanner clients are receiving requests and scanning files by looking at the scanner list.
- Checking vscan information
You can quickly determine whether the virus scanner is on, how well the virus scanner is working, and what files extensions are scanned and not scanned.
- Setting and resetting the request timeout for a virus scan
You can change how long Data ONTAP should wait for a virus scan to finish before requesting the status of the scan. This situation occurs when you have a slow network or your virus scanner is slow, and you want to avoid the scan request from timing out prematurely.
- Allowing file access when the scan cannot be performed
You can specify that files can be accessed if a scanner is not available or if scan requests time out.
- Controlling vFiler unit usage of host storage system virus scanners
Depending on your security concerns, you can either have each vFiler unit register with the virus scanner or allow the vFiler units to use the host storage system's virus scanners.
- Checking the status of virus-scanning options
You can quickly determine whether the virus-scanning options you want to use are set to the values you want.
- Stopping a virus scanner session
You can stop a scanner session if you have to terminate CIFS on a storage system or if you upgrade your antivirus program to a new version.
- Resetting the scanned files cache
If you have a new virus-scanning signature file, you might want toreset the cache to rescan files that were scanned using an old signature file.
- Enabling virus scan messages to CIFS clients
You can better inform CIFS client users by sending explicit virus warning messages if the virus-scanning application running on the storage system detects that a file that a CIFS client is trying to access is infected with a virus.
- Virus scan server error messages
The virus scan server disconnects and reconnects often and displays an error message.
