ibm-information-center/dist/eclipse/plugins/i5OS.ic.ifs_5.4.0.1/rzaaxscanex.htm

102 lines
5.8 KiB
HTML

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html lang="en-us" xml:lang="en-us">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="security" content="public" />
<meta name="Robots" content="index,follow" />
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
<meta name="DC.Type" content="reference" />
<meta name="DC.Title" content="Examples: Scan for viruses and files being opened" />
<meta name="abstract" content="These examples show what the exit program can scan for." />
<meta name="description" content="These examples show what the exit program can scan for." />
<meta name="DC.Relation" scheme="URI" content="rzaaxscan.htm" />
<meta name="DC.Relation" scheme="URI" content="../apis/ifsopenexit.htm" />
<meta name="DC.Relation" scheme="URI" content="../apis/ifscloseexit.htm" />
<meta name="DC.Relation" scheme="URI" content="rzaaxscansval.htm" />
<meta name="copyright" content="(C) Copyright IBM Corporation 1999, 2006" />
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 1999, 2006" />
<meta name="DC.Format" content="XHTML" />
<meta name="DC.Identifier" content="rzaaxscanex" />
<meta name="DC.Language" content="en-us" />
<!-- All rights reserved. Licensed Materials Property of IBM -->
<!-- US Government Users Restricted Rights -->
<!-- Use, duplication or disclosure restricted by -->
<!-- GSA ADP Schedule Contract with IBM Corp. -->
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
<link rel="stylesheet" type="text/css" href="./ic.css" />
<title>Examples: Scan for viruses and files being opened</title>
</head>
<body id="rzaaxscanex"><a name="rzaaxscanex"><!-- --></a>
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
<h1 class="topictitle1">Examples: Scan for viruses and files being opened</h1>
<div><p>These examples show what the exit program can scan for.</p>
<div class="section"> <ul><li>Viruses <p>The exit programs can scan for viruses. If a virus is located
in a file, the anti-virus program can act accordingly by repairing the problem
or by attempting to quarantine the virus. Since the iSeries™ server itself would not be infected
by the virus, what this accomplishes is a reduction in virus transmissions
between servers.</p>
</li>
<li>Calls to know when a file was opened <p>You may also scan to find out
when a file was opened. By enacting this scan, you are able to track the date
and time of when certain files were accessed. This would be useful when you
want to track the behavior of certain users.</p>
</li>
</ul>
</div>
<div class="section"><p>The scan can occur at two different time depending on how the
system values are set and how the scan environment is established. The following
list describes different kinds of scanning depending on the time they occur.</p>
</div>
<div class="section"> <ol><li>Runtime scanning <p>A runtime scan is a scan on a file or files during
normal day-to-day activities. This ensures the integrity of your files every
time they are accessed. Scanning during your normal activities allows you
to ensure that your file or files are current for whatever standards you are
scanning.</p>
<p><strong>Example of a runtime scan for viruses</strong></p>
<p>You
choose to access a file on the integrated file system from your PC. When the
file is opened from the PC, it is scanned. Because an open exit program is
registered and the QSCANFS system value is set to scan files in the "root"
(/), QOpenSys and UDFS file systems. The scan shows one virus is found and
the anti-virus exit program proceeds to repair the problem. After the exit
program repairs the file, the file is no longer infected. Thus, the access
from the PC is not infected and it cannot spread the infection.</p>
<p>Now
say that instead of scanning for viruses on that access, you choose not to
do a runtime scan. Then, after accessing the infected file from your PC, the
virus might be transferred to your PC. By employing a runtime scan, the virus
can be detected before it spreads to your PC.</p>
<p>The
main shortcoming of this method is that resource time is required to do the
scans. Users attempting to access a file must wait until the scan is completed,
before being able to use the file. The system ensures that scanning is performed
only when required, not on every access.</p>
</li>
<li>Mass or manually activated scanning <p>You can
use this option if you want to scan multiple items at the same time. In this
instance, you can set the scan to occur when your server is off, such as during
the weekend. This has very little impact on accessing files during your normal
day-to-day activities. The scan is done offline. Therefore, it can reduce
runtime scan overhead for files that do not change after the mass scan is
completed. Because re-scans are not required when such files are accessed
again.</p>
</li>
</ol>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzaaxscan.htm" title="With iSeries, you can scan integrated file system objects.">Scanning support</a></div>
</div>
<div class="relconcepts"><strong>Related concepts</strong><br />
<div><a href="rzaaxscansval.htm" title="Related to this scan support are two system values. You can use these two system values to establish the scanning environment you want for your server.">Related system values</a></div>
</div>
<div class="relinfo"><strong>Related information</strong><br />
<div><a href="../apis/ifsopenexit.htm">QIBM_QP0L_SCAN_OPEN</a></div>
<div><a href="../apis/ifscloseexit.htm">QIBM_QP0L_SCAN_CLOSE</a></div>
</div>
</div>
</body>
</html>