Sophos Anti-Virus For NetApp Storage Systems

2y ago
60 Views
3 Downloads
646.39 KB
23 Pages
Last View : 1d ago
Last Download : 3m ago
Upload by : Raelyn Goode
Transcription

Sophos Anti-Virus for NetAppStorage Systemsuser guideProduct Version: 3.0

ContentsAbout this guide. 1About Sophos Anti-Virus for NetApp Storage Systems.2System requirements. 4Before you install Sophos Anti-Virus for NetApp Storage Systems. 5Installing Endpoint Security and Control. 5Configuring Endpoint Security and Control for use with a Network Appliance filer. 6Configuring the NetApp Storage System. 7Installing Sophos Anti-Virus for NetApp Storage Systems. 10Download the installer. 10Run the installer. 10Managing Sophos Anti-Virus for NetApp Storage Systems from MMC.12Snap in Sophos Anti-Virus for NetApp Storage Systems to MMC.12Add an antivirus server to MMC. 13Add a filer for scanning by the antivirus server. 14View antivirus server statistics. 16Switch Sophos Anti-Virus for NetApp to Cluster-Mode scanning.17Stop the Sophos Anti-Virus for NetApp service on an antivirus server.18Start the Sophos Anti-Virus for NetApp service on an antivirus server. 19Technical support. 20Legal notices. 21(2018/09/21)

Sophos Anti-Virus for NetApp Storage Systems1 About this guideThis guide explains how to: Install Sophos Anti-Virus for NetApp Storage Systems on a Windows computer to provide offboardantivirus scanning. Manage Sophos Anti-Virus for NetApp Storage Systems from a Microsoft Management Console(MMC) snap-in.The guide applies to filers that are running Data ONTAP 7-Mode or Clustered Data ONTAP.If you want to upgrade Sophos Anti-Virus for NetApp Storage Systems, version 1 in a Data ONTAP7-Mode environment, download and run the installer as described in Installing Sophos Anti-Virus forNetApp Storage Systems (page 10).Sophos documentation is published at is guide refers to a virtual storage server as a vserver. NetApp now uses Storage VirtualMachines (SVMs) instead of vservers. See l/GUID-E643017F-041B-4ECC-BEA1-E4D80E26A47E.html for more information on SVMs.NoteSome of the links in this guide lead to information maintained by third parties and are provided foryour convenience. Although we try to review the accuracy of the links periodically, the links maychange without our knowledge.Copyright Sophos Limited1

Sophos Anti-Virus for NetApp Storage Systems2 About Sophos Anti-Virus for NetAppStorage SystemsWhat is Sophos Anti-Virus for NetApp Storage Systems for?Sophos Anti-Virus for NetApp Storage Systems provides on-access scanning of files held on aNetwork Appliance filer running the NetApp Data ONTAP storage operating system.How does it work?Sophos Anti-Virus for NetApp Storage Systems uses the scanning capabilities of Sophos EndpointSecurity and Control to scan the files. You install and run Sophos Endpoint Security and Controland Sophos Anti-Virus for NetApp Storage Systems on a Windows computer that will provide virusscanning. In this guide, this computer is referred to as the antivirus server.When a workstation attempts to access a file held on a Network Appliance filer, Sophos EndpointSecurity and Control intercepts the file and scans it. If the file is found to be clean, access to the fileis granted. If the file is infected, access is denied.1. Endpoint devices2. Filer3. Antivirus scanning server protected by Sophos Endpoint Security and Control2Copyright Sophos Limited

Sophos Anti-Virus for NetApp Storage SystemsYou can use Sophos Anti-Virus for NetApp Storage Systems for scanning filers that are running DataONTAP 7-Mode or Clustered Data ONTAP. It can work in a multi-filer and multi-AV machine modes.How is it managed?You manage Sophos Anti-Virus for NetApp Storage Systems from an MMC snap-in, which can be onthe antivirus server itself, or on a different computer.Copyright Sophos Limited3

Sophos Anti-Virus for NetApp Storage Systems3 System requirementsIn a Data ONTAP 7-Mode environment, Sophos Anti-Virus for NetApp Storage Systems runs onWindows 2003 R2 and later.In a Clustered Data ONTAP environment, Sophos Anti-Virus for NetApp Storage Systems runs onWindows 2008 and later.For a full list of system requirements, go to the system requirements page on the Sophos dgebase/118633.aspx).You must have internet access in order to download the installation software from the Sophoswebsite.4Copyright Sophos Limited

Sophos Anti-Virus for NetApp Storage Systems4 Before you install Sophos Anti-Virus forNetApp Storage SystemsBefore installing Sophos Anti-Virus for NetApp Storage Systems, you need to do the following: Install Sophos Endpoint Security and Control (antivirus component only) on the computer you wantto use as an antivirus server. Make sure Sophos Endpoint Security and Control is configured for use with the Network Appliancefiler. Configure Windows security options on the antivirus server. Configure your NetApp Storage System:— In a Data ONTAP 7-Mode environment, make sure vscan is enabled on the Network Appliancefiler.— In a Clustered Data ONTAP environment, install Clustered Data ONTAP Antivirus Connectoron an antivirus server and create a scanner pool.4.1 Installing Endpoint Security and ControlBefore you install Sophos Anti-Virus, you must install Sophos Endpoint Security and Control on thecomputer that you want to use as an antivirus server, to provide virus scanning.If Sophos Endpoint Security and Control has already been installed on the computer, go straight toConfiguring Endpoint Security and Control for use with a Network Appliance filer (page 6).Otherwise, do one of the following: Use Sophos Enterprise Console to create a managed installation of Sophos Endpoint Security andControl (antivirus component only). Create a standalone installation of Sophos Endpoint Security and Control (antivirus componentonly).4.1.1 Create a managed installationRefer to the Enterprise Console quick startup guide, which is available at nterprise-console.aspx.Put the antivirus server in a separate Enterprise Console group, so that you can apply a newantivirus policy to just that computer.Now go to Configuring Endpoint Security and Control for use with a Network Appliance filer (page6).4.1.2 Create a standalone installationRefer to the Endpoint Security and Control standalone startup guide , which is available at yright Sophos Limited5

Sophos Anti-Virus for NetApp Storage SystemsAfter you have installed Sophos Endpoint Security and Control, configure it for use with a NetworkAppliance filer.4.2 Configuring Endpoint Security and Control foruse with a Network Appliance filerYou must configure Sophos Endpoint Security and Control to: Scan files when they are copied, moved or opened (on read). Scan files with an unknown filename extension. Scan remote files. Move all infected files to a quarantine folder. Move all suspicious files to a quarantine folder. Not display messages on the screen when scanning files.How you do this depends on whether you have a managed installation of Endpoint Security andControl or a standalone installation.4.2.1 Configure a managed installation1. At the computer that is running Enterprise Console, if Enterprise Console is not already open, clickStart All Programs Sophos Enterprise Console.2. Create a new antivirus policy to contain settings for the antivirus server.3. Double-click the policy to edit it.4. In the Anti-Virus and HIPS Policy dialog box, in the On-access scanning panel, beside Enableon-access scanning, click Configure.5. In the On-access scan settings dialog box, on the Scanning tab, ensure that the Read check boxis selected. Otherwise, no files are scanned.6. Click the Extensions tab. Click Add. In the extensions list box, type ? and press ENTER.7. Click the Windows Exclusions tab. Ensure that the Exclude remote files check box is notselected.8. Click the Cleanup tab.9. Ensure that the Automatically clean up items that contain a virus/spyware check box iscleared. Click Deny access and move to (enter a full UNC path). Using the Browse button,specify the path of the folder to which infected files should be moved.The folder must be on the antivirus server, and should preferably be accessible to antivirusadministrators only.10. Under Suspicious files, click Deny access and move to (enter a full UNC path). Using theBrowse button, specify the path of the folder to which suspicious files should be moved.11.12.13.14.6The folder must be on the antivirus server, and should preferably be accessible to antivirusadministrators only.Click OK to close the On-access scan settings dialog box.In the Anti-Virus and HIPS Policy dialog box, click Messaging.In the Messaging dialog box, on the Desktop Messaging tab, clear the Enable desktopmessaging check box. Click OK.Click OK to close the Anti-Virus and HIPS Policy dialog box.Copyright Sophos Limited

Sophos Anti-Virus for NetApp Storage Systems15. Click the policy and drag it onto the group that contains the antivirus server. When prompted,confirm that you want to continue.The policy settings will be applied to Endpoint Security and Control on the antivirus server.You have configured Sophos Endpoint Security and Control for use with a filer.If the antivirus server is running Windows Server 2008, Windows Server 2008 R2, Windows Server2012, or Windows Server 2012 R2, you must configure the Windows security options. See Configuresecurity options on Windows Server 2008 or later.Otherwise, go straight to Installing Sophos Anti-Virus for NetApp Storage Systems (page 10).4.2.2 Configure a standalone installation1. At the antivirus server, if Sophos Endpoint Security and Control is not already open, in thenotification area, right-click the Sophos Endpoint Security and Control icon, and then click OpenSophos Endpoint Security and Control.2. In the Sophos Endpoint Security and Control window, on the Configure menu, point to AntiVirus, and then click On-access scanning.3. In the On-access scan settings for this computer dialog box, on the Scanning tab, ensure thatthe Read check box is selected. Otherwise, no files are scanned.4. Click the Extensions tab. Click Add. In the extensions list box, type ? and press ENTER.5. Click the Exclusions tab. Ensure that the exclusions list does not contain All remote files.6. Click the Cleanup tab.7. Ensure that the Automatically clean up items that contain virus/spyware check box is cleared.Click Deny access and move to. Using the Browse button, specify the path of the folder to whichinfected files should be moved.8.9.10.11.The folder must be on this computer, and should preferably be accessible to antivirusadministrators only.Under Suspicious files, click Deny access and move to. Using the Browse button, specify thepath of the folder to which suspicious files should be moved.The folder must be on this computer, and should preferably be accessible to antivirusadministrators only.Click OK to close the On-access scan settings for this computer dialog box.On the Configure menu, point to Anti-Virus, and then click Messaging.In the Messaging dialog box, on the Desktop messaging tab, clear the Enable desktopmessaging check box. Click OK.You have configured Sophos Endpoint Security and Control for use with a filer.4.3 Configuring the NetApp Storage System4.3.1 Configure a Data ONTAP 7-Mode environmentBefore installing Sophos Anti-Virus for NetApp Storage Systems to scan a Network Appliance filerrunning Data ONTAP 7-Mode, make sure vscan is enabled.1. To check if vscan is enabled, on the filer console at the command prompt type the following:vscanThe console output will show whether virus scan is enabled or disabled.Copyright Sophos Limited7

Sophos Anti-Virus for NetApp Storage Systems2. If vscan is disabled, enable it. At the command prompt, type:vscan onFor more information, at the command prompt type:vscan helpAlternatively, refer to your Network Appliance filer documentation.4.3.2 Configure a Clustered Data ONTAP environmentBefore installing Sophos Anti-Virus for NetApp Storage Systems to scan a Network Appliance filerrunning Clustered Data ONTAP, make sure that Clustered Data ONTAP Antivirus Connector isinstalled and running and create a scanner pool.NoteFor antivirus configuration instructions for Clustered Data ONTAP, see the NetApp Clustered DataONTAP 8.2 Antivirus Configuration Guide.For antivirus best practices for Clustered Data ONTAP, see the NetApp Best Practices Guide forClustered Data ONTAP 8.2 Windows File Services, the Antivirus Architecture section.Configure Clustered Data ONTAP Antivirus Connector1. On the antivirus server, install Clustered Data ONTAP Antivirus Connector, as described in theNetApp Clustered Data ONTAP 8.2 Antivirus Configuration Guide, and make sure that it is running.The minimum operating system requirement for Cluster-Mode scanning (Clustered Data ONTAPAntivirus Connector) is Windows Server 2008.Clustered Data ONTAP Antivirus Connector and Sophos Anti-Virus communicate with eachother on the loopback address (127.0.0.1).NoteWhen you create a scanner pool, you must add the service account credentials for running theClustered Data ONTAP Antivirus Connector service as the privileged user in the scanner pool.Same service account must be used to run the antivirus scanning service.2. To configure the connector, right-click the Configure Data ONTAP Management LIFs forPolling application shortcut created on the desktop during the installation and select Run asadministrator. This will open the Configure Data ONTAP Management LIFs for Pollingconfiguration dialog box.3. Configure Data ONTAP management LIFs.Credentials used for polling must have at least read access to the network interface. You mightwant to use a separate user to poll the Data ONTAP management LIFs for security purposes. Itis preferable to use the "cluster admin" or "vsadmin" accounts.4. Click Test to verify the connectivity and authenticate the connection.Create a scanner pool1. Create a scanner pool. On the Cluster-Mode filer console at the command prompt type thefollowing:8Copyright Sophos Limited

Sophos Anti-Virus for NetApp Storage Systemsvserver vscan scanner-pool create -vserver vs1 -scanner-pool SP1-servers antivirus server IP address -privileged-users netapp\administratorIn this command: vs1 is the name of the Vserver on which you want to create a scanner pool. SP1 is the name of the scanner pool. antivirus server IP address is the IP address of the antivirus server which is allowed toconnect to the Vserver. netapp\administrator is the privileged user who can connect to the Vserver.You must add the service account credentials for running the Clustered Data ONTAP AntivirusConnector service as the privileged user in the scanner pool. Same service account must beused to run the antivirus scanning service.2. Apply the scanner pool configuration.vserver vscan scanner-pool apply-policy -vserver vs1 -scanner-pool SP1-scanner-policy primary3. Enable vscan.vserver vscan enable -vserver vs14. To check the scanner pool configuration, type:vserver vscan scanner-pool showCopyright Sophos Limited9

Sophos Anti-Virus for NetApp Storage Systems5 Installing Sophos Anti-Virus for NetAppStorage SystemsSophos Anti-Virus for NetApp Storage Systems has two components: The Sophos Anti-Virus for NetApp Storage Systems service. An MMC snap-in, which is used to manage the Sophos Anti-Virus for NetApp Storage Systemsservice.You can install the components on the same computer, or on separate computers.5.1 Download the installerThis section assumes that you have a MySophos account and that you have associatedyour license credentials with it. If you need help, go to aspx.1. At the Windows computer on which you want to install Sophos Anti-Virus for NetApp StorageSystems or another computer that has internet access, go to www.sophos.com/en-us/support/downloads.aspx.2. Type your MySophos username and password.You see a web page that shows your license or licenses.3. Under your license name, find the Groupware and Network Storage Protection downloads.Download the Anti-Virus for Network Storage installer.4. Ensure that the installer is in a location that can be accessed from the computer on which you wantto install Sophos Anti-Virus for NetApp Storage Systems.5.2 Run the installerAt the Windows computer on which you want to install Sophos Anti-Virus for NetApp StorageSystems, you must log on as an administrator.If you are installing the Sophos Anti-Virus for NetApp Storage Systems service (that is, if thiscomputer will be an antivirus server), this section assumes you have installed and configured SophosEndpoint Security and Control (as explained in Before you install Sophos Anti-Virus for NetAppStorage Systems (page 5)).If you are installing the MMC snap-in, this section assumes that this computer is running MMCversion 1.2 or later.If you are upgrading from Sophos Anti-Virus for NetApp Storage Systems, version 1, the SophosAnti-Virus for NetApp Storage Systems, version 3 installer will uninstall Sophos Anti-Virus for NetAppStorage Systems, version 1 and preserve your settings, such as antivirus server and filer names.1. Locate the installer that you downloaded and double-click it.2. In the installer window, click Install.A wizard guides you through installation.3. On the Welcome page, click Next.10Copyright Sophos Limited

Sophos Anti-Virus for NetApp Storage Systems4. On the End-user licence agreement page, read the licence agreement. If you accept it, click Iaccept the terms of the licence agreement, and click Next.5. On the Custom setup page, select the features to install.The selection depends on the use you want to make of this computer. To use the computer as an antivirus server and to manage Sophos Anti-Virus for NetAppStorage Systems from MMC, click Next and continue to step 6. To use the computer only as an antivirus server, click the drop-down arrow next to MMC snapin. Select Entire feature will be unavailable. Click Next and continue to step 6. To use the computer only to manage Sophos Anti-Virus for NetApp Storage Systems fromMMC, click the drop-down arrow next to Anti-virus service. Select Entire feature will beunavailable. Click

Sep 21, 2018 · Sophos Anti-Virus for NetApp Storage Systems 4 Before you install Sophos Anti-Virus for NetApp Storage Systems Before installing Sophos Anti-Virus for NetApp Storage Systems, you need to do the following: Install Sophos Endpoint Security and Control (antivirus component only

Related Documents:

Manage Sophos Anti-Virus from a Microsoft Management Console (MMC) snap-in. The guide applies to filers that are running in 7-Mode. To install Sophos Anti-Virus on a NetApp filer to provide onboard anti-virus scanning for filers running in C lust er-Mode, see the Sophos Anti-Virus f or

HTTPS Sophos UTM Manager IP Address 192.168.2.200 Sophos UTM (UTM01) Port 4433 Ext. IP Address 65.227.28.232 WebAdmin Port 4444 Port 4433 InternetInte Sophos UTM (UTM03) Sophos UTM (UTM04) Sophos UTM (UTM02) Sophos UTM (UTM06) Sophos UTM (UTM07) Sophos UTM (UTM05) Sophos UTM (UTM08) Customer/Of ce 1 Customer/Of ce 2 Port 4422 Gateway Manager

This section describes the Sophos products required for managed endpoint security: Sophos Enterprise Console Sophos Update Manager Sophos Endpoint Security and Control 2.1 Sophos Enterprise Console Sophos Enterprise Console is an administration tool that deploys and manages Sophos endpoint software using groups and policies.

Sophos Server Protection Sophos Email Protection EMC NetApp Sophos for Network Storage ストレージサーバー 外部用サーバー SafeGuard Sophos Anti-Virus for vShield - VDI Windows Mac Linux Windows クライアント 支店 / 支社 2 Sophos RED Sophos Wi-Fi Ac

1 About this guide This guide explains how to: Install Sophos Anti-Virus for NetApp on a Windows computer to provide offboard antivirus scanning. Manage Sophos Anti-Vir us f or NetApp from a Microsoft Management Console (MMC) snap-in. The guide applies to filers th

Anti oxidation, Anti aging Anti oxidation, Anti aging Anti oxidation, Anti aging Skin regeneration, Nutrition, Anti wrinkle Anti oxidation, Anti aging Anti oxidation Whitening Whitening Effects Skin Whitening, Anti oxidant Anti inflammatory, Acne Anti oxidant, Anti inflammatory Skin smooth and glowing Anti oxidant, Anti inflammatory Anti ageing .

The NetApp Hybrid Cloud Control interface appears. Find more information NetApp HCI Resources page NetApp HCI Installation and Setup Instructions TR-4820: NetApp HCI Networking Quick Planning Guide NetApp Element Plug-in for vCenter Server documentation NetApp Configuration Advisor 5.8.1 or later network validation tool

Animal nutrition, life stage, diet, breed-specific, neutered AVAST array of life-stage diets are available, and these can be subdivided to encompass neutered pet diets, breed-specific diets and those with different requirements (whether a mobility or hairball diet). So, do pets require these different life-stage diets, or is it all a marketing ploy by nutrition companies? Selecting the right .