virus scanning

Question

My environment has a virus engine McAffee running against all windows. So, when a cifs share is accessible on the windows by all users, if a user drops an infected file on the cifs share, does McAffee server catch that? What exactly is the CAVA and would I need that for my environment?

nandas · Answer

If the user has real-time scanning enabled on his/her desktop, then the virus will be caught on the desktop itself - it will not go to the NAS share.CAVA is a virus solution for EMC NAS boxes - but CAVA does not do any scanning on its own - it is an agent to interface the NAS with the AV server in the network. All the scanning will be done by your AntiVirus Server (having the scan engine - depends on what vendor you use). The CAVA client will be installed on the AV Server which runs as a service on the AV server. You need to do some more configuration on the AV Server, based on the product that you ar eusing.On the NAS - you configure the virus scanning configuration file where you mention the IP Address of the AV Servers and start the virus scanning service. Also you choose all scanning policy (like file types to be scanned etc - you can do these through MMC tool). So, when any user writes on the NAS share, since virus scanning is enabled on the NAS and it knows the AV servers, the header information of the file is sent to AV server for virus scanning and once no threat is found, the write operation is complete. If any threat is detected, it either deletes the file or take other action based on the AV server configuration.Please note, this scanning is done on the Network and it is very important to build the list of file types you want to scan - or to build the exclusion list if you select to scan all files with some exclusion.It may a good idea to have a dedicated network interface on NAS for virus scanning. You also need to have a dedicated domain user for this purpose, the user will have local admin right on AV server and will be assigned special permission for virus scanning on the Celerra (you may use MMC tool for this as well).Lastly - if you are absolutely sure that, there will be no client/machine on your network which will not have real time virus scanning, then CAVA scanning will be a duplicate effort. But many times, user may stop virus scanning on their machine - or any new machine is on the network with no Antivirus software etc etc - which justifies the use of CAVA with the NAS box.Hope this helps. Please let me know, if any more information is required. Please refer to EMC Document 'Using CAVA' for more information.Thanks,Sandip

nandas · Answer

Hi,I hope you are doing much better - please let me know, if you need any more details.Thanks,Sandip

virus scanning

Dell Support Resources

Latest Solutions

Key replacement for Alienware Area 51m R1

65W Charger manufacturing authenticity

SE2426HG, serial number correct

Bios Password Activated By Mistake

Why does my Dell laptop turn on but show a black screen?