Configure the file virus scan

When configuring virus scanning, each assigned FSC (specified using assignedfsc elements in the fmsmaster.xml configuration file) and each FMS bootstrap FSC (specified using the Fms_Bootstrap_Urls preference) should have a quarantine volume. A common configuration is for assigned FSCs and FMS bootstrap FSCs to be the same set of servers. When configuring assigned FSCs in the fmsmaster.xml configuration file, assigned FSCs should be placed in a different FSC Group (fscgroup element) than the protected area FSC servers. Doing so prevents features such as direct FSC routing from allowing files to bypass the assigned FSC scanning. Procedure Create a new File Management System (FMS) server cache (FSC) where the scanning is done or configure an existing FSC. For better performance, you can install and configure the virus scanner on the same host. The scanner software and quarantine volume must be accessible by the FSC. (Optional) Configure the FSC as an entry FSC. If you create a new entry FSC, update the FMSBootstrapUrls preference at supplier sites to include the new entry FSC URL. If you are not using an existing virus scanner, install the selected third-party virus scanner. Add a quarantinevolume element to the FMS primary configuration file for the scan FSC. This specifies the location of the temporary directory where the scanning is done. Exempt this location from automatic scanning by any other virus scanner. Note All FMS volumes should be exempted from automatic virus scans. Ensure the virus scanner is installed and configured to be accessible to FMS. Write a script or executable to call the scanner. The contents of the calling script or executable depends on the scanner interface. The script or executable acts as an intermediary between FMS and the virus scanner. It must handle the inputs and process the output to determine if the scan was a success or not. The script or executable must: Remove any temporary files it creates. Return a 0 (zero) value if the file passes the scan or a non 0 value if it fails. (Optional) Remove the files or directory that it scans. This is not required. The following example is a simple script for calling the freeware ClamAV virus scanner: Copy A simple example of a scanner script that talks to the ClamAV freeware 3rd party scanner. @echo off @REM This is a batch file that will scan for viruses IF "%1" == "" (EXIT /B 1) IF "%2" == "" (EXIT /B 2) "C:\Program Files\ClamAV-x64\clamscan.exe" -r %1 >> %2 2>&1 findstr /c:"Scanned files: 1" %2 >nul IF NOT "%ERRORLEVEL%" == "0" ( del %2 >nul EXIT /B 3 ) findstr /c:"Infected files: 0" %2 >nul IF NOT "%ERRORLEVEL%" == "0" ( del %2 >nul EXIT /B 4 ) del %2 >nul EXIT /B 0 ENDLOCAL This example takes two input values: the directory to scan and the path to a temporary output file. The third-party scanner is called directly and the output is directed to a temporary file. The temporary file is scanned for keywords indicating a scan success. The temporary file is deleted, and 0 is returned. Create the quarantine volume root directory. Examples The following example shows a sample quarantinevolume volume entry added to the FSC element. Copy Where: root Specifies the location where the file is quarantined until it is scanned. Once the file is determined to be free of threats, the file is moved to the main volume in the FSC. command Specifies the script invoked by the FSC to have the virus scanner evaluate the file. $SCAN_FILE Represents the file to be scanned. $SCAN_FILE is automatically set to the name of file currently being uploaded to FMS. $SCAN_UNIQUE.txt The file containing the scanning results for each file evaluated. timeout Specifies the number of seconds the FSC waits to receive the result of the scan. (20 seconds in this example.) If a result is not received within this time period, the FSC fails the operation.