Vscan | Configuration

The OPSWAT connector for NetApp ONTAP is configured through a config.ini file. This page documents the settings available in that file, grouped by section. If a setting is left empty or omitted, its default value is used (if there is one). If a setting contains a value outside its allowed range or of the wrong type, the connector will not start and will report the invalid setting.

Example

[MetaDefender Storage Security] IP=127.0.0.1 Port=80 Apikey= StorageUnits=1 [Storage Unit 1] ClientId= SharePath= [Settings] LogRetentionCountInDays=7 LogLevel=Information FileProcessingTimeoutInSeconds=3600 RpcLocalPipeHost=127.0.0.1 ZoneIdentifierFiles=0

[MetaDefender Storage Security] section

Defines how the connector reaches the MetaDefender Storage Security instance.

Setting

Type

Default

Description

IP

Text (IPv4 address)

127.0.0.1

IP address of the MetaDefender Storage Security instance.

Port

Integer

80

Network port of the MetaDefender Storage Security instance.

Apikey

Text


API key used to authenticate with MetaDefender Storage Security.

StorageUnits

Integer

1

Number of configured storage units

[Storage Unit N] sections

One section per configured storage unit, numbered sequentially ( [Storage Unit 1], [Storage Unit 2], and so on). The number of these sections should match the StorageUnits value above. If the value of the StorageUnits variable is less than the number of Storage Unit sections in the file, only the first N storage units will be checked. If the value is greater, all storage units will be checked and the extra amount of the value will be silently ignored. If there is any storage unit section that is missing (e.g. StorageUnits=3, [Storage Unit 1] and [Storage Unit 3] are present but [Storage Unit 2] is missing), the connector will fail.

Setting

Type

Default

Description

ClientId

Text


Identifier of the storage unit generated by MetaDefender Storage Security

SharePath

Text


Path of the share to protect as it is integrated in MetaDefender Storage Security

[Settings] section

General connector behavior.

Setting

Type

Default

Description

LogRetentionCountInDays

Integer (1-30)

7

Number of days log files are retained

LogLevel

Text

Information

Logging verbosity. One of: Debug, Information, Warning, Error, Fatal

FileProcessingTimeoutInSeconds

Integer

3600

Maximum time allowed to process a single file before it times out

RpcLocalPipeHost

Text

127.0.0.1

Local host address used for the connector's internal communication

ZoneIdentifierFiles

Integer (0-3)

0

Handling mode for Windows Zone.Identifier files (see below).

ZoneIdentifierFiles values

Zone.Identifier files are small metadata streams Windows attaches to files downloaded from the internet. They hold no user content, so scanning them is usually unnecessary. This setting selects how the connector handles them; all other files always go through the normal scanning pipeline regardless of this value.

Value

Mode

Behavior

0

Skip (default)

Zone.Identifier files are ignored, not scanned and no verdict is returned

1

Scan

Zone.Identifier files are sent to MetaDefender Storage Security and scanned like any other file

2

Allow

Zone.Identifier files are immediately allowed without scanning

3

Block

Zone.Identifier files are immediately blocked without scanning