Administrator Guide

28
FluidFS Data Protection
This section contains information about protecting FluidFS cluster data. Data protection is an important and integral part of any
storage infrastructure. These tasks are performed using the Dell Storage Manager Client.
Managing Antivirus
The FluidFS cluster antivirus service provides real-time antivirus scanning of les stored in SMB shares. The antivirus service applies
only to SMB shares; NFS is not supported. The scan operation is transparent to the client, subject to the availability of an antivirus
server.
Files are scanned when a client tries to read or execute the le.
The antivirus service consists of two components:
• Antivirus servers — one or more network-accessible computers running a supported third-party, ICAP-enabled antivirus
application to provide the antivirus scanning service to the FluidFS cluster.
• A FluidFS cluster antivirus scanning policy species le extensions and directories to exclude from scans, an antivirus scanning
le size threshold, and whether to allow or deny access to les larger than the le size threshold.
When an SMB share client requests a le from the FluidFS cluster, the cluster passes the le to an antivirus server for scanning and
then takes one of the following actions:
• If the le is virus-free, the FluidFS cluster permits client access. The FluidFS cluster does not scan that le again, providing it
remains unmodied since the last check.
• If the le is infected, the FluidFS cluster denies client access. The client does not know that the le is infected. Therefore:
– A le access returns a system-specic file not found state for a missing le, depending on the client's computer.
– An access denial might be interpreted as a le permissions problem.
Figure 57. Antivirus Scanning
Only storage administrators can recover an uninfected version of the le, or access and process the infected le. To gain access to
an infected le, you must connect to the SMB share through another SMB share on which the antivirus service is disabled.
Otherwise, the FluidFS cluster recognizes the le as infected, and denies access. You can also access the le through an NFS
export, because NFS does not support antivirus scanning.
File transfers between the FluidFS cluster and the anti-virus server are not encrypted, so communication should be protected or
restricted.
Supported Anti-Virus Applications
For the latest list of supported anti-virus applications, see the Dell Fluid File System Version 5 Support Matrix.
FluidFS Data Protection
593