6.5 HP StoreAll OS User Guide

19 Configuring Antivirus support
The StoreAll Antivirus feature can be used with supported Antivirus software, which must be run
on systems outside the cluster. These systems are called external virus scan engines.
To configure the Antivirus feature on a StoreAll cluster, complete these steps:
1. Add the external virus scan engines to be used for virus scanning. You can schedule periodic
updates of virus definitions from the virus scan engines to the cluster nodes.
2. Enable Antivirus on the file systems.
3. Configure Antivirus settings as appropriate for your cluster.
For file sharing protocols other than SMB/CIFS, when Antivirus is enabled on a file system, scans
are triggered when a file is first read. Subsequent reads to the file do not trigger a scan unless the
file has been modified or the virus definitions have changed. For SMB/CIFS, you must specify the
file operations that trigger a scan (open, close, or both).
The scans are forwarded to an external scan engine, which blocks the operation until the scan is
complete. After a successful scan, if the file is found to be infected, the system reports a
permission denied error message as the result of the file operation. If the file is clean, the file
operation is allowed to go through.
All infected files are quarantined by default. Use the quarantine utility (ibrix_avquarantine)
to manage the quarantined infected files, such as to move, delete, list or reset the infected files.
For more information, see the HP StoreAll OS CLI Reference Guide.
You can define Antivirus exclusions on directories in a file system to exclude files from being
scanned. When you define an exclusion rule for a directory, all files/folders in that directory
hierarchy are excluded from Antivirus scans based on the rule.
To access the Antivirus Settings panel, select Cluster Configuration from the Navigator, and then
select Antivirus from the lower Navigator.
346 Configuring Antivirus support