For steps 1 and 2, please see this page
NFS shares originating from Dell OneFS PowerScale are incompatible with MDSS deployments on Windows. A Linux-based MDSS deployment is required to scan these shares.
To add NFS share on Linux deployment, please follow this article.
3. Setting up the NFS Client machine
On the same machine where MetaDefender Storage Security is installed, run this powershell command from an admin console:
With the default options, a user has read permissions when mounting an NFS share using the anonymous user. We can give the anonymous user write permissions by changing the UID and GID that it uses to mount the share.
To change the UID and GID we must make a simple change to the Windows registry by performing the following steps:
Open regedit by typing it in the search box end pressing Enter.
Browse to
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ClientForNFS\CurrentVersion\Default.Create a new New DWORD (32-bit) Value inside the Default folder named
AnonymousUidand assign the UID 0Create a new New DWORD (32-bit) Value inside the Default folder named
AnonymousGidand assign the GID 0Reboot the machine to apply the changes.
4. Mount the NFS share
The below command needs to be run as NTSYSTEM user because NFS service is running as NTSYSTEM user.
To run terminal as NTSYSTEM, please do the following:
download and extract PsTools
Open an Administrator console
cd to PsTools folder
run
.\PsExec.exe -i -s cmd.exe. It will open another terminal as a NTSYSTEM user
In the above-opened terminal, run the following command:
For example, the NFS share will be mounted in the Y drive:
To make the mount persistent, please follow this article.
5. Add the NFS share in MDSS UI
In order to integrate NFS with MetaDefender Storage Security, please follow these steps:
As NFS is not using any credentials, you can have only one NFS account in MDSS. If you already have one, please go to step 4
From the left side menu, navigate to Inventory, click Add New > Account, choose NFS (Network File System) and click Next.
Give your account a name so you can easily identify it later
From the left side menu, navigate to Inventory, click Add New > Unit, choose the NFS account created above and click Next.
Give your unit an unique name so you can easily identify it later
Assign your unit to a Group
In Mount Directory, enter the drive the share was mounted on in 4. Mount the NFS share. In this example,
Y:\Click Next in order to finish the process.
Please follow the Microsoft recommendations for file and directory names.