This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Exclude Netapp Volume(s) From On-Access Scanning?

All,

Is it possible to "Exclude" a volume(s) on a Netapp, from On-Access Scanning?  If it is, what would be the settings and proper format?  For example, for "Item Type", would it be a "Folder", with the "Item Name" being "\vol\volume_name\"?

Thank you in Advance!

 



This thread was automatically locked due to age.
Parents
  • Hello Tim Duran,

    not sure what you're up to as you've posted this in Endpoint instead of Anti-Virus for NetApp/Network.

    I'm a perfect NetApp ignoramus - are you talking about excluding a mounted NetApp volume in the client/endpoint from scanning (as the files a already scanned on the filer) or excluding a volume from scanning by an anti-virus server?

    Christian

  • Hey Christian,

    In true newbie form, I didn't realize there was an Anti-Virus for Netapp/Network.  Thank you.

    In answer, it would be the latter of what you mentioned. "...excluding a volume from scanning by an anti-virus server?"

    So for the Netapp's, we have a Sophos antivirus scanner/client/endpoint, not sure the terminology.  Then additionally on this endpoint there is the Sophos plugin installed for Netapp's.  With this setup, we can perform "on-access" scanning.  While it works great, we want to exclude a particular volume.  Meaning if someone opens a file on this volume, we don't want the scanner to scan and possibly flag these files as a virus (they are not).

    On the scanner/endpoint, I have opened "Sophos Endpoint Security and Control", then went to Configure>Anti-Virus>On-access scanning.  Clicked on the "Exclusions" tab.  Then clicked on "Add".  As an item type I selected "Folder", and for "Item Name" I entered the volume in this form:  "\vol\volume_name\". 

    It didn't work...

     

    Tim

     

  • Hello Tim.

    I hope I understand you correctly.
    As for scanning on NetApp it works like this: vscan controls virus scanning for a node or in a vfiler context, i.e. a vfiler requests that a file should be scanned. It's not a good idea that the scanner second-guesses a vfiler's decisions (usually based on file extensions), so you shouldn't fiddle with settings for the scanner. To enable/disable scanning on a particular share the cifs_shares command is likely what you are looking for (what's someone who's newer than a newbie - I have no idea what I am talking about).

    Christian

Reply
  • Hello Tim.

    I hope I understand you correctly.
    As for scanning on NetApp it works like this: vscan controls virus scanning for a node or in a vfiler context, i.e. a vfiler requests that a file should be scanned. It's not a good idea that the scanner second-guesses a vfiler's decisions (usually based on file extensions), so you shouldn't fiddle with settings for the scanner. To enable/disable scanning on a particular share the cifs_shares command is likely what you are looking for (what's someone who's newer than a newbie - I have no idea what I am talking about).

    Christian

Children