Veritas NetBackup™ Appliance Commands Reference Guide
- Overview
- Appendix A. Main > Appliance commands
- Appendix B. Main > Manage > FibreChannel commands
- Appendix C. Main > Manage > HighAvailability commands
- Appendix D. Main > Manage > Libraries commands
- Appendix E. Main > Manage > Libraries > Advanced > ACS commands
- Appendix F. Main > Manage > License commands
- Appendix G. Main > Manage > MountPoints commands
- Appendix H. Main > Manage > NetBackup CLI commands
- Appendix I. Main > Manage > OpenStorage commands
- Appendix J. Main > Manage > Software commands
- Appendix K. Main > Manage > Storage commands
- Appendix L. Main > Manage > Tapes commands
- Appendix M. Main > Monitor commands
- Appendix N. Main > Network commands
- Appendix O. Main > Network > Security commands (DeviceCert)
- Appendix P. Main > Reports commands
- Appendix Q. Main > Settings commands
- Appendix R. Main > Settings > Alerts commands
- Appendix S. Main > Settings > Notifications view commands
- Appendix T. Main > Settings > Security commands
- Appendix U. Main > Support commands
Name
Main > Settings > Security > Antimalware — Manage the detection and removal of malware.
SYNOPSIS
Disable
Enable
LUServer
Report
RestoreFile
ScanSchedule
Status
DESCRIPTION
The Antimalware command lets you manage the detection and removal of malware as follows:
Enable full malware protection on the appliance, which includes automatic protection (AutoProtect) and on-demand protection. The feature is enabled by default.
AutoProtect protection scans all incoming files to the appliance. On-demand protection scans files that already exist on the appliance. You must set a daily or a weekly schedule to use on-demand protection.
Set up a server to receive malware reports from the appliance. The Veritas LiveUpdate server is set as the default server.
Manually generate a report that identifies the type of malware that was detected, the affected files, the severity level, and whether any files have been quarantined.
Restore quarantined files that are not malware.
OPTIONS
- Disable <ALL AutoProtect>
To disable all malware protection, enter Disable ALL.
To disable AutoProtect only, enter Disable AutoProtect. You can still use the on-demand protection if you have set up a scan schedule.
Note:
When you select Disable ALL, you must reboot the appliance for the change to take effect.
- Enable <ALL AutoProtect>
To enable all malware protection, enter Enable ALL. For on-demand protection, you must also set up a scan schedule.
To enable AutoProtect only, enter Enable AutoProtect
Note:
When you select Enable ALL, you must reboot the appliance for the change to take effect.
- LUServer Check Delete Set Show
Check
Use this option to verify connectivity to the server that is currently set to receive malware reports from the appliance. Any time you change the LiveUpdate server URL with the Set option, you must run the Check option and wait until the antimalware agent polls the LiveUpdate server at least once. The polling process takes about 7200 seconds (2 hours). A message appears with the status result of the polling process.
Delete
Use this option to remove your local server that is currently set to receive malware reports from the appliance. Deleting your local server automatically sets the Veritas LiveUpdate server as the default.
Set
Use this option to enter the name of a local server where you want to send malware reports. The Veritas LiveUpdate server is set as the default server. If you have a local LiveUpdate Administrator server that reports to the Veritas LiveUpdate server, use this option to enter the local server URL which overrides the default server.
After you have changed the server URL with the Set option, the antimalware agent starts a 7200-second (2-hour) window to poll the LiveUpdate server and download malware definition updates. A message appears with the status result of the process.
Show
Use this option to see the server that is currently set to receive malware reports from the appliance.
- Report
Use this option to generate a report of detected malware activity. The following shows an example of the command output details:
appliance_name.AntiMalware> Report |---------+--------------+-------------------------+-----------------+ | Date | File Name |Severity|Malware Detected|Quarantined File | |---------+--------------+-------------------------+-----------------| | 20230605| home/nbusers/|Critical|Trojan.Gen.NPE.2|/var/log/sdcslog/| | | eicarcom2.ZIP| | |quarantine/ | | | | | |1888e1f36e8.QUR | +--------------------------------------------------------------------+
- Restore
Use this option to restore a file that is not malware but has been quarantined. After entering the Restore option, you are prompted to enter the following:
Maintenance account password.
Complete path for the original file as it appears in the File Name column of the command output.
- ScanSchedule Set
Use this option to schedule automatic daily or weekly malware scans for On-demand protection for files that reside on the appliance. The command prompts you to enter the time of day in 24-hour format, and the day(s) of the week to run the scans.
- Status
Use this option to check the current configuration and setup for the antimalware feature. The following shows an example of the command output details:
appliance_name.AntiMalware> Status |-----------------------+----------+----------------+ | Driver Name | Status | Schedule | |-----------------------+----------+----------------| | AutoProtect | Enabled | N/A | |-----------------------+---------------------------| | On-demand protection | Enabled | Daily 12:30:00 | +---------------------------------------------------+