VSEL 1.9 allows you to quarantine infections from remote file systems. This option is disabled in the configuration by default.
IMPORTANT: Enabling this option will copy infected files from remote file systems to the /quarantine directory of the local host. McAfee strongly suggests that you not enable this option if your organization's security policy does not permit such action.
Perform the following steps to enable remote file quarantine:
- Enable Scanning files on network mounted volumes:
- Open the VSEL manager.
- Select VSEL Monitor, Configure, On-Access Settings.
- Select Edit, Scan files on network mounted volumes.
- Enable the anti-virus quarantine actions:
- In the VSEL manager, select VSEL Monitor, Configure, On-Access Settings.
- Select Edit, Anti-virus Actions.
- Enable remote file system quarantine in the configuration file:
NOTE: You can only modify this setting in the configuration file. It cannot be configured via ePolicy Orchestrator.
- Log on as root.
- Stop the nails service. Type the following command and press ENTER:
#/etc/init.d/nails stop
- Open /var/opt/NAI/LinuxShield/etc/nailsd.cfg with a plain text editor and edit the following section:
# Allow or deny quarantining from remote FS (Bool)
nailsd.profile.OAS.quarantineFromRemoteFS: false
to:
# Allow or deny quarantining from remote FS (Bool)
nailsd.profile.OAS.quarantineFromRemoteFS: true
- Save the file.
- Start the nails service. Type the following command and press ENTER:
#/etc/init.d/nails start
