This post is more than 5 years old
5 Posts
0
2063
January 25th, 2012 02:00
Cava exclusions list
I'm currently putting together a list of file extesions to exclude from AV scanning via Cava from our Celerra/VNX products.
One of the most common file types to exclude is "????????", however I can't help but wonder if this would exclude a file by the name of "viru.exe", "abcd.doc" (or a similarly named 8-character total length filename).
Is anyone able to shed any light on this please?
No Events found!
Peter_EMC
674 Posts
0
January 25th, 2012 03:00
see Primus emc60253
"In excluding ???????? Celerra is following windows semantics at the protocol level. For Microsoft - ???????? : means 8 characters not taking into account '.' ..
"excl=????????" is found to exclude not only the files fitting the format of Excel temporary files, but also files with four character names and a three character extension. A file like "abcd.txt" is excluded since the "." is counted as a character and the total string length is eight characters. ..
In NAS 5.6 and above, "excl=????????" will exclude all files names with 8 characters - i.e. "abcdefgh" will be excluded just like "abcd.exe" is excluded. In NAS 5.6 and above, "excl=>>>>>>>>" will exclude all file names with 1 to 8 characters, not including extension, that is, "abc" will be excluded just like "abcdefgh" is excluded."
Dave_Grimshaw
5 Posts
0
January 25th, 2012 05:00
That's perfect - Thanks.
I' spent a lot of time looking through Powerlink, but as usual to no avail..
eric9603
1 Message
0
January 26th, 2012 15:00
Care to share what you've come up with for a viruschecker.conf? I am currently implementing McAfee with my VNXe3300 and can't seem to find anywhere with good examples of a configuration that makes sense. I opened a Powerlink ticket over a week ago and it isn't even assigned yet...
Rainer_EMC
4 Operator
•
8.6K Posts
0
January 26th, 2012 15:00
See the knowledgbase – there should be some suggestions there