PowerScale OneFS 9.2.1.0 CloudPools Administration Guide

Syntax

isi antivirus icap settings modify 
  [--fail-open {true | false}]
  [{--glob-filters <string>... | --clear-glob-filters
  | --add-glob-filters <string> | --remove-glob-filters <string>}]
  [--glob-filters-enabled {true | false}]
  [--glob-filters-include {true | false}]   
  [--path-prefixes <path>... | --clear-path-prefixes 
  | --add-path-prefixes <path> | --remove-path-prefixes <path>}]  
  [--repair {true | false}]
  [--report-expiry <integer><time>]
  [--scan-cloudpool-files{true | false}]
  [--scan-on-close {true | false}]
  [--scan-on-open {true | false}] 
  [--scan-size-maximum <integer>{k | M | G | T | P}]
  [--service {true | false}]  
  [--quarantine {true | false}] 
  [--truncate {true | false}] 
  [--verbose]

Options

--fail-open {true | false}

If --scan-on-open is set to true, determines whether users can access files that cannot be scanned. If this option is set to false, users cannot access a file until the file is scanned by an ICAP server.

If --scan-on-open is set to true, this option has no effect.

--glob-filter <string>

Specifies a file name or extension. To specify multiple filters, you must include multiple --glob-filter options within the same command. Specifying this option will remove any existing glob filters.

All strings that include wildcards must be enclosed in quotes, for example, "*.jpg". You can include the following wildcards:

Wildcard character	Description
*	Matches any string in place of the asterisk. For example, specifying "m*" would match "movies" and "m123"
[ ]	Matches any characters contained in the brackets, or a range of characters separated by a dash. For example, specifying "b[aei]t" would match "bat", "bet", and "bit" For example, specifying "1[4-7]2" would match "142", "152", "162", and "172" You can exclude characters within brackets by following the first bracket with an exclamation mark. For example, specifying "b[!ie]" would match "bat" but not "bit" or "bet" You can match a bracket within a bracket if it is either the first or last character. For example, specifying "[[c]at" would match "cat", and "[at" You can match a dash within a bracket if it is either the first or last character. For example, specifying "car[-s]" would match "cars", and "car-"
?	Matches any character in place of the question mark. For example, specifying "t?p" would match "tap", "tip", and "top"

NOTE If you specify this option, the specified filters will replace all previously specified filters in the list.

--clear-glob-filters

Clears the list of filters.

--add-glob-filters <string>

Adds the specified filters to the list of filters.

--remove-glob-filters <string>

Removes the specified filters to the list of filters.

--glob-filters-enabled {true | false}

Determines whether glob filters are enabled. If no glob filters are specified, glob filters will remain disabled even if this option is set to true.

--glob-filters-include {true | false}

Determines how glob filters are interpreted by OneFS. If set to true, OneFS will scan only files that match a glob filter. If set to false, OneFS will scan only files that do not match any glob filters.

--path-prefix <path>

If specified, only files contained in the specified directory path will be scanned. This option affects only on-access scans. To specify multiple directories, you must include multiple --path-prefix options within the same command. Specifying this option will remove any existing path prefixes.

NOTE If you specify this option, the specified filters will replace all previously specified filters in the list.

--clear-path-prefixes

Clears the list of paths.

--add-path-prefixes <path>

Adds the specified paths to the list of paths.

--remove-path-prefixes <path>

Removes the specified paths to the list of paths.

--repair {true | false}

Determines whether OneFS attempts to repair files that threats are detected in.

--report-expiry <integer> <time>

Determines how long OneFS will retain antivirus scan reports before deleting them.

The following <time> values are valid:

Y

Specifies years

M

Specifies months

W

Specifies weeks

D

Specifies days

H

Specifies hours

m

Specifies minutes

s

Specifies seconds

--scan-cloudpool-files {true | false}

Determines whether cloudpool files are scanned for antiviruses..

--scan-on-close {true | false}

Determines whether files are scanned after the files are closed.

--scan-on-open {true | false}

Determines whether files are scanned before the files are sent to users.

--scan-size-maximum <integer>{k | M | G | T | P}

If specified, OneFS will not send files larger than the specified size to an ICAP server to be scanned.

NOTE Although the parameter accepts values larger than 2GB, OneFS does not scan files larger than 2GB.

--service {true | false}

Determines whether the antivirus service is running.

--quarantine {true | false}

Determines whether OneFS quarantines files that threats are detected in. If --repair is set to true, OneFS will attempt to repair the files before quarantining them. If both --truncate and --quarantine are set to true, the --truncate option is ignored.

--truncate {true | false}

Determines whether OneFS truncates files that threats are detected in. If --repair is set to true, OneFS will attempt to repair the files before truncating them. If both --truncate and --quarantine are set to true, the --truncate option is ignored.

{--verbose | -v}

Displays a message confirming that the settings have been modified.