HP StoreAll Storage - Manual (Page 152)

13 Configuring Antivirus support
The X9000 antivirus feature can be used with supported Antivirus software, which must be run on
systems outside the cluster. These systems are called external virus scan engines.
To configure the Antivirus feature on an X9000 cluster, complete these steps:
1. Add the external virus scan engines to be used for virus scanning. You can schedule periodic
updates of virus definitions from the virus scan engines to the cluster nodes.
2. Enable Antivirus on file systems.
3. Configure Antivirus settings as appropriate for your cluster.
For file sharing protocols other than CIFS, when Antivirus is enabled on a file system, scans are
triggered when a file is first read. Subsequent reads to the file do not trigger a scan unless the file
has been modified or the virus definitions have changed. For CIFS, you must specify the file
operations that trigger a scan (open, close, or both).
The scans are forwarded to an external scan engine, which blocks the operation until the scan is
complete. After a successful scan, if the file is found to be infected, the system reports a
permission denied
error message as the result of the file operation. If the file is clean, the file
operation is allowed to go through.
You can define Antivirus exclusions on directories in a file system to exclude files from being
scanned. When you define an exclusion rule for a directory, all files/folders in that directory
hierarchy are excluded from Antivirus scans based on the rule.
Anti-virus support can be configured from the GUI or the CLI. On the GUI, select Cluster
Configuration from the Navigator, and then select Antivirus from the lower Navigator. the Antivirus
Settings panel displays the current configuration.
152 Configuring Antivirus support