Managing Antivirus Servers

You can specify how infected files are handled and suspend antivirus scanning.

To configure how infected files are handled:

1. In the global administration view, select Services > Antivirus in the navigation pane.
   The Antivirus page is displayed.
   

2. Click Settings to configure antivirus scanning.
   The Antivirus Settings page is displayed.
   
   When a threat is detected – Specify how to handle infected files:

   • Block Viruses – The infected file is not downloaded and it is quarantined.
   • Log Only – An email is sent to the portal listing the file that might be infected and the file is copied to quarantine. It is still possible to download or preview the infected file.

   Maximum content size to scan – The maximum size of a file to be scanned. Since most viruses are found at the beginning of the file, CTERA does not recommend changing this value. Increasing the value will adversely impact scanning performance. Make sure that this value is less than the maximum specified by the vendor. For example, for McAfee VirusScan Enterprise for Storage, the maximum file size is 128MB.
   Retain quarantine files for – The number of days that files are kept in quarantine before being removed.
   Connections per ICAP Server – The maximum number of connections allowed per each ICAP server that is configured either as an application server or as a background scanner. For example, if the connection count is set to 20, the recommended default, and there are 3 application servers and 2 scanning servers configured in the portal cluster (5 servers in total), the maximum total number of concurrent connections to each ICAP server is 100 connections (5*20). Make sure that this value is less than the maximum specified by the vendor. For example, for McAfee VirusScan Enterprise for Storage, the default is 100.

3. If you changed any of the default settings, click Save.

To disable or enable antivirus scanning:

1. In the global administration view, select Services > Antivirus in the navigation pane.
   The Antivirus page is displayed.
   
2. Click Disable to suspend antivirus scanning or Enable to resume antivirus scanning for all servers.
   

To suspend or resume antivirus scanning for a specific server:

1. In the global administration view, select Settings > Antivirus in the navigation pane.
   The Antivirus page is displayed.
2. Select the server row in the list of Antivirus Servers.
   
3. Click Suspend to suspend antivirus scanning or Resume to resume antivirus scanning for the server.
   The status for resumed servers is Connected and for suspended servers it is Disabled
   

Deleting an Antivirus Server

To delete an antivirus server:

1. In the global administration view, select Services > Antivirus in the navigation pane.
   The Antivirus page is displayed.
2. Select the row of the antivirus server to delete and click Delete.
   
   A confirmation window is displayed.
3. Click Delete to confirm.