Dave_Grimshaw

updated

15 years ago

0

2087

January 25th, 2012 02:00

Cava exclusions list

I'm currently putting together a list of file extesions to exclude from AV scanning via Cava from our Celerra/VNX products.

One of the most common file types to exclude is "????????", however I can't help but wonder if this would exclude a file by the name of "viru.exe", "abcd.doc" (or a similarly named 8-character total length filename).

Is anyone able to shed any light on this please?

  • Peter_EMC

    674 Posts

    652

    0

    Posted January 25th, 2012 03:00

    see Primus emc60253

    "In excluding ???????? Celerra is following windows semantics at the protocol level. For Microsoft - ???????? : means 8 characters not taking into account '.' ..

    "excl=????????" is found to exclude not only the files fitting the format of Excel temporary files, but also files with four character names and a three character extension. A file like "abcd.txt" is excluded since the "." is counted as a character and the total string length is eight characters. ..

    In NAS 5.6 and above, "excl=????????" will exclude all files names with 8 characters - i.e. "abcdefgh" will be excluded just like "abcd.exe" is excluded.  In NAS 5.6 and above, "excl=>>>>>>>>" will exclude all file names with 1 to 8 characters, not including extension, that is, "abc" will be excluded just like "abcdefgh" is excluded."

  • 652

    0

    Posted January 25th, 2012 05:00

    That's perfect - Thanks.

    I' spent a lot of time looking through Powerlink, but as usual to no avail..

  • eric9603

    1 Message

    652

    0

    Posted January 26th, 2012 15:00

    Care to share what you've come up with for a viruschecker.conf?  I am currently implementing McAfee with my VNXe3300 and can't seem to find anywhere with good examples of a configuration that makes sense.  I opened a Powerlink ticket over a week ago and it isn't even assigned yet...

  • Rainer_EMC

    6 Operator

    •

    8645 Posts

    652

    0

    Posted January 26th, 2012 15:00

    See the knowledgbase – there should be some suggestions there