Hi All:
I've read NetApp just partnered with the big 3 AV vendors [http://quicken.excite.com/investments/news/story/bw/?story=/news/stories/bw /20001129/a2086.htm&symbol=NTAP]
BUT, having had to dig myself out of a loveletter reincarnation recently, I'm looking for some input on what other sysadmins do to keep their NetApps free of buggies. I just want something to tide us over until the vaporware AVOnTap becomes a reality.
TIA!
-john
John Witham MCSE, MCP+i, A+ Systems Engineer Takeda Pharmaceuticals America, Inc. V://847.383.3304 F://847.383.3205 mailto://jwitham@takedapharm.com
John,
My solution is not available to an all NT shop, but I export all filesystems to a UNIX box with Samba and re-export with Samba to an NT box for scanning.
The details are: (on the NetApp) export with root permission to the UNIX box use the option cifs.nfs_root_ignore_acl (on the Samba server use the following options) valid users = nt_admin_who_will_do_the_scanning admin users = nt_admin_who_will_do_the_scanning veto files = /.snapshot/.snapshots/ follow symlinks = No dont descend = .snapshot, ./.snapshot
Hope this helps, Paul Lupa
"Witham, John" wrote:
Hi All:
I've read NetApp just partnered with the big 3 AV vendors [http://quicken.excite.com/investments/news/story/bw/?story=/news/stories/bw /20001129/a2086.htm&symbol=NTAP]
BUT, having had to dig myself out of a loveletter reincarnation recently, I'm looking for some input on what other sysadmins do to keep their NetApps free of buggies. I just want something to tide us over until the vaporware AVOnTap becomes a reality.
TIA!
-john
John Witham MCSE, MCP+i, A+ Systems Engineer Takeda Pharmaceuticals America, Inc. V://847.383.3304 F://847.383.3205 mailto://jwitham@takedapharm.com
Paul,
Apologies if this is a little off-topic ! But I am a little puzzled.
Why don't you use ONTAP CIFS to directly get to your NT box instead of using Samba ?
Shridhar
"Paul Lupa (ra5507)" wrote:
John,
My solution is not available to an all NT shop, but I export all filesystems to a UNIX box with Samba and re-export with Samba to an NT box for scanning.
We have had two issues that were solved by the Samba route, admittedly the process would be cleaner if we didn't have go at it in a round about way.
1 We are able to turn off the .snapshot directories for the virus scan without turning off the snapshots for all the CIFS Shares.
2 With the cifs.nfs_root_ignore_acls. we were able to access all files.
I would be interested in what others are doing if there is a cleaner way to scan.
Paul Lupa
Shridhar Deuskar wrote:
Paul,
Apologies if this is a little off-topic ! But I am a little puzzled.
Why don't you use ONTAP CIFS to directly get to your NT box instead of using Samba ?
Shridhar
"Paul Lupa (ra5507)" wrote:
John,
My solution is not available to an all NT shop, but I export all filesystems to a UNIX box with Samba and re-export with Samba to an NT box for scanning.
-- _____ . . ' \ . . |>> O// . . | _\ . . | | | . . . . | / | . . . . | / .| . ...o |
Shridhar Deuskar Productivity & Systems 408-447-8790
-- ---------------------------- Paul Lupa Motorola (512) 933-6542 Voice (512) 933-6331 Fax Paul.Lupa@Motorola.com
Pager 1168616@skytel.com or 1800759-8352 Pin:1168616
-
Paul Lupa -
Paul Lupa (ra5507) -
Shridhar Deuskar -
Witham, John