ENS has support for CAVA. CEE and CAVA are a framework running on a Windows platform. The framework enables third-party antivirus engines to scan files that are stored on a
Dell EMC Celerra, VNXe, VNX, Unity,
or VMAX eNAS and NAS array. This article describes how to install ENS to work with
CAVA.
To install ENS with support for CAVA, the CAVA switch is needed.
Add this switch for local installations as shown below:
setupEP.exe ADDLOCAL="tp,fw,wc" /CAVA
For managed installations, change the McAfee Agent deployment task parameters for ENS Threat Prevention. In the
Command Line field, type the following switch:
/CAVA
The CAVA switch disables the blocking cache in the on-access scanner (OAS), increases the number of OAS scanning threads to 200, and enables network scanning. These setting changes are needed to make sure that the OAS scans all files from CAVA.
NOTE: For managed systems, make sure to enable the network scanning option in the On-Access Scan policy for ENS Threat Prevention. In the On-Access Scan policy, click
Show advanced, and make sure that the option
On Network Drives is selected for
What to scan. Whether you are using the Default (Standard) or the option for Standard/Low/High-risk process policies, enabling the "On Network Drives" feature only needs to be enabled on the Standard tab for Process Types. This configuration makes sure that the "On Network Drives" feature configured at the time of ENS installation using the CAVA switch, does not get disabled once the managed policy enforces on the system.
By default, 200 scanning threads are made available in ENS. If this number is too many or too few for the system, you can change the value for the number of scanning threads during installation. Use the following command:
For local installations: setupEP.exe ADDLOCAL="tp,fw,wc" /CAVA="<number of scanning threads>"
For managed installations: SetupTP.exe /CAVA="<number of scanning threads>"
Example:
For local installations:
setupEP.exe ADDLOCAL="tp,fw,wc" /CAVA="100"
For managed installations use this switch in the deployment task
Command Line field:
/CAVA="100"
To change the number of scanning threads after installation:
CAUTION: This article contains information about opening or modifying the registry.
- The following information is intended for System Administrators. Registry modifications are irreversible and could cause system failure if done incorrectly.
- Before proceeding, Technical Support strongly recommends that you back up your registry and understand the restore process. For more information, see the Microsoft Windows registry information for advanced users article.
- Do not run a REG file that is not confirmed to be a genuine registry import file.
- Disable the ENS self-protection policy. This step is to allow the following registry key for scanning threads to be modified.
- Change the number of scanning threads:
- Press Windows+R, type regedit.exe, and click OK to open the Windows registry editor.
- Navigate to the following registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\AVSolution\EM\EM\dwEMThreadCount
- Change the number of scanning threads.
- Exit the registry editor.
- Re-enable the ENS self-protection policy.
- Restart the system.
