No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

OceanStor 9000 V300R006C00 File System Feature Guide 12

Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuration Operations

Configuration Operations

Based on the requirement analysis and application planning, this section uses interconnection of Symantec antivirus servers as an example to describe how to configure InfoScanner for the TV station to protect files from virus attacks.

Prerequisites

  • The front-end service network of OceanStor 9000, antivirus servers to be configured, and AD domain servers are interconnected.
  • Antivirus servers and OceanStor 9000 have been added to the AD domain.
  • The static domain name has been configured. If not, Choose Settings > Cluster Settings > InfoEqualizer > Basic Information.
  • Microsoft .NET Framework 3.5.1 has been installed on antivirus servers.
  • Preparations listed in Table 8-9 have been made.
    Table 8-9  Configuration preparations

    No.

    Item

    1

    Confirm the account and password for logging in to DeviceManager.

    2

    Confirm the number of antivirus servers to be configured and collect their IP addresses.

    3

    Confirm the AD domain account and password of the scan authentication user.

    4

    Confirm information about the directories to be scanned, including the scan type (real-time or periodical).

    5

    Confirm the scan policy for each scan directory:
    • Non-scan Period
    • Excluded File Types in Scan
    • Max. File Size for Scan

    6

    Antivirus software installation package. After installing Antivirus Agent Software on antivirus servers, contact antivirus software providers to install antivirus software on antivirus servers.

NOTE:
To interconnect Symantec antivirus servers, you need to change the Symantec process name on the antivirus servers. For details about how to change the Symantec process name, contact technical support engineers.

Context

Figure 8-8 shows the configuration process for InfoScanner.
Figure 8-8  InfoScanner configuration process

Procedure

  1. Install Antivirus Agent Software.

    Antivirus Agent Software needs to be installed on both AntivirusServer1 and AntivirusServer2.

    Log in to DeviceManager on antivirus servers. Choose Settings > InfoScanner > Antivirus Server. to download Antivirus Agent Software. Decompress the software installation package and double-click AntivirusAgentSetup.exe, and install the software according to the installation wizard. Figure 8-9 shows the page of downloading the software.

    Figure 8-9  Downloading Antivirus Agent Software

  2. Perform configurations on the antivirus servers.
    1. Set an account for starting services.

      Open the Start menu of a Windows server. Input services.msc in the search box and press Enter.

      In the services dialog box that is displayed, find the Symantec Embedded Database service. Right-click the service and select Properties from the shortcut menu. In the Properties dialog box that is displayed, click the Log On tab page. Perform the configuration using the AD domain account and the password. After the configuration is complete, select the service and right-click it to restart the service process.

      Repeat the preceding operations for Symantec Endpoint Protection * and Antivirus Agent Watchdog services.

    2. Configure Symantec Endpoint Protection.

      Open the antivirus software. On the home page, select Change Settings to configure Symantec Endpoint Protection, as shown in Figure 8-10.

      Figure 8-10  Configuring Symantec Endpoint Protection

      Choose Virus and Spyware Protection > Configure Setting.

      On the page that is displayed, click the Auto-Protect tab. In the Options area, select Scan files on remote computer and deselect Only when files are executed, as shown in Figure 8-11.

      Figure 8-11  Configuring Virus and Spyware Protection

      Click Actions. In the Scan Actions dialog box that is displayed, check that First action is set to Clean risk, and If first action fails is set to Quarantine risk, as shown in Figure 8-12.

      Figure 8-12  Configuring Scan Actions

      Click OK. The configuration is complete.

  3. Configure antivirus servers on OceanStor 9000.

    Two antivirus servers AntivirusServer1 and AntivirusServer2 need to be configured.

    Choose Settings > InfoScanner > Antivirus Server. on DeviceManager. Click Add and set parameters of the antivirus server. Figure 8-13 shows the configuration for AntivirusServer1, which can be used as a reference for the configuration for AntivirusServer2.

    Figure 8-13  Configuring AntivirusServer1

  4. Add the scan authentication user and antivirus servers to the AntivirusGroup.

    AntivirusGroup is a local authentication user group created in OceanStor 9000. Before configuring InfoScanner, you need to add the scan authentication user to the AntivirusGroup.

    Choose Provisioning > User Authentication > Local Authentication User Group. on DeviceManager. Click AntivirusGroup. On the Add Domain User dialog box that is displayed, click Add to add the scan authentication user to AntivirusGroup, as shown in Figure 8-14.

    Figure 8-14  Adding the scan authentication user to AntivirusGroup
    Click Add to add AntivirusServer1 to AntivirusGroup, as shown in Figure 8-15 and then follow the same step to add AntivirusServer2 to AntivirusGroup.
    Figure 8-15  Adding the antivirus servers to AntivirusGroup

  5. Create a shared root directory.

    Antivirus servers only support access to scan directories using the CIFS protocol. To ensure that antivirus scanning can be implemented for NFS shared directories in the storage system, you need to create a CIFS share for the root directory (/). Only after a CIFS share is created for the root directory, can antivirus servers obtain the share names of periodical scan directories to implement antivirus scanning.

    Choose Provisioning > Create Share. on DeviceManager to create a CIFS share for the root directory.

    Figure 8-16  Creating a shared root directory (I)
    Figure 8-17  Creating a shared root directory (II)

  6. Set antivirus service parameters.

    Choose Settings > InfoScanner > Scan Service. on DeviceManager to enable the antivirus service. Set the parameters and click Save to save the parameter setting, as shown in Figure 8-18.

    Figure 8-18  Setting antivirus service parameters
    Log in to the antivirus server. Choose Local drive (C:)\Windows. Right-click a blank spot and choose New > Text Document. Change the text name to AntivirusAgent. Open the AntivirusAgent file and write the content as shown in Figure 8-19 to the file (A indicates the static domain name of InfoEqualizer and B indicates the isolation path.) Click Close and then Save. Change the file type to .ini and restart the Antivirus Server.
    Figure 8-19  Content written to the AntivirusAgent file

  7. Optional: Create a scan policy.

    In this example, scan policy strategy1 for the Storage directory needs to be created while scan policy Default for the Business directory is created automatically in the system.

    Choose Settings > InfoScanner > Scan Policy. on DeviceManager. Set the parameters and click OK, as shown in Figure 8-20.

    Figure 8-20  Creating scan policy strategy1

  8. Configure scan directories.

    Scan policy strategy1 is configured for the Storage directory and Default is for the Business directory.

    Choose Settings > InfoScanner > Directory Scan. on DeviceManager. Select the directory that you want to configure and set the parameters. Figure 8-21 and Figure 8-22 show how to configure strategy1 for the Storage directory. Refer the figures to configure Default for the Business directory.

    Figure 8-21  Configuring the Storage directory as a real-time scan directory (I)
    Figure 8-22  Configuring the Business directory as a real-time scan directory (II)

Translation
Download
Updated: 2019-06-27

Document ID: EDOC1000122519

Views: 70071

Downloads: 145

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next