Manual

Defining protocol-specific policies
For certain file sharing protocols (currently only SMB/CIFS), you can specify the file operations
that trigger a scan (open, close, or both). There are three policies:
• OPEN (Default). Scan on open.
• CLOSE. Scan on close.
• BOTH. Scan on open and close.
NOTE: If you configure the protocol specific policy to CLOSE – Scan on close, older written files
are not scanned automatically whenever the virtual scan engine is updated with newer virus
definitions. Also there is a delay of 35 seconds before the file is subject to scanning after the file
closes to flush all the data. Any read or open to the file during this time is not scanned.
As virus detection and updates of virus definition files always lags new viruses being discovered,
it is highly recommended that AV be configured to use the Both option to re-scan older written files
on open whenever new virus definitions are provided, thereby ensuring protection against virus
infections. Scan on Close should be used only as an optimization to take the virus scan penalty at
close time instead of at an open time.
To set the policy:
1. Select Protocol Scan Settings from the lower Navigator tree.
The AV Protocol Settings panel then displays the current setting.
2. To set or change the setting, click Modify on the panel and then select the appropriate setting
from the Action dialog box.
To set the policy from the CLI, use this command:
ibrix_avconfig -u -k PROTOCOL -G O|C|B
Defining exclusions
Exclusions specify files to be skipped during Antivirus scans. Excluding files can improve
performance, as files meeting the exclusion criteria are not scanned. You can exclude files based
on their file extension or size.
By default, when exclusions are set on a particular directory, all of its child directories inherit those
exclusions. You can overwrite those exclusions for a child directory by explicitly setting exclusions
on the child directory or by using the No rule option to stop exclusion inheritance on the child
directory.
230 Configuring Antivirus support