LogLevel = {logging level}
|
Logging level.
If the parameter value is not specified, the DefaultLogLevel parameter value from the [Root] section is used.
Default value:
LogLevel = Notice
|
Log = {log type}
|
Logging method.
Default value:
Log = Auto
|
LogProtocol = {Boolean}
|
Indicates whether protocol messages are registered in the log file of NSS volumes monitor SpIDer Guard for NSS.
Allowed values:
•Yes—messages are registered. •No—messages are not registered. Default value:
LogProtocol = No
|
ExePath = {path to file}
|
Path to the executable file of the component.
Default value:
ExePath = <opt_dir>/bin/drweb-nss
•For Linux: ExePath = /opt/drweb.com/bin/drweb-nss
|
Start = {boolean}
|
The component must be launched by the configuration daemon Dr.Web ConfigD.
When you specify the Yes value for this parameter, it instructs the configuration daemon to start the component immediately; and when you specify the No value, it instructs the configuration daemon to terminate the component immediately.
Default value:
Start = Yes
|
NssVolumesMountDir = {path to directory}
|
Path to the file system directory where NSS file system volumes are mounted.
Default value:
NssVolumesMountDir = /media/nss
|
ProtectedVolumes = {volume name}
|
Names of NSS file system volumes mounted on NssVolumesMountDir and protected by Dr.Web for UNIX file servers. If the parameter is empty, all volumes in NssVolumesMountDir are protected.
You can specify a list as the parameter value. The values in the list must be separated with commas. The parameter can be specified more than once in the section (in this case, all its values are combined into one list).
Default value:
ProtectedVolumes =
|
ExcludedPath = {path to file or directory}
|
Path to the object which must be skipped during scanning. You can specify a directory or file path. If a directory is specified, all directory content including subdirectories will be skipped. The exception is objects paths to which are specified in the parameterIncludedPath—such objects will be scanned.
You can specify a list as the parameter value. The values in the list must be separated with commas. The parameter can be specified more than once in the section (in this case, all its values are combined into one list).
Paths in the list must be relative to NssVolumesMountDir path.
Default value:
ExcludedPath =
|
IncludedPath = {path to file or directory}
|
Path to the object which must be scanned. You can specify a directory or file path. If a directory is specified, all directory content will be scanned.
This parameter can be used only if you want to allow scanning of separate objects (files and subdirectories) paths to which is specified in the parameter ExcludedPath. In addition, this parameter has priority over the parameter ExcludedPath: if a path to an object is specified in the both parameters, this object will be scanned.
You can specify a list as the parameter value. The values in the list must be separated with commas. The parameter can be specified more than once in the section (in this case, all its values are combined into one list).
Paths in the list must be relative to NssVolumesMountDir path.
Default value:
IncludedPath =
|
OnKnownVirus = {action}
|
Action applied by Dr.Web for UNIX file servers to a known threat (virus, etc.) detected by using signature analysis during the scanning initiated by NSS volumes monitor.
Possible values: Cure, Quarantine, Delete
Default value:
OnKnownVirus = Cure
|
OnIncurable = {action}
|
Action applied by Dr.Web for UNIX file servers to an incurable threat (that is, an attempt to apply Cure failed) detected during the scanning initiated by NSS volumes monitor.
Possible values: Quarantine, Delete
Default value:
OnIncurable = Quarantine
|
OnSuspicious = {action}
|
Action applied by Dr.Web for UNIX file servers to an unknown threat (or suspicious objects) detected by using heuristic analysis during the scanning initiated by NSS volumes monitor.
Possible values: Report, Quarantine, Delete
Default value:
OnSuspicious = Quarantine
|
OnAdware = {action}
|
Action applied by Dr.Web for UNIX file servers to adware detected during the scanning initiated by NSS volumes monitor.
Possible values: Report, Quarantine, Delete
Default value:
OnAdware = Report
|
OnDialers = {action}
|
Action applied by Dr.Web for UNIX file servers to a dialer detected during the scanning initiated by NSS volumes monitor.
Possible values: Report, Quarantine, Delete
Default value:
OnDialers = Report
|
OnJokes = {action}
|
Action applied by Dr.Web for UNIX file servers to joke programs detected during the scanning initiated by NSS volumes monitor.
Possible values: Report, Quarantine, Delete
Default value:
OnJokes = Report
|
OnRiskware = {action}
|
Action applied by Dr.Web for UNIX file servers to riskware detected during the scanning initiated by NSS volumes monitor.
Possible values: Report, Quarantine, Delete
Default value:
OnRiskware = Report
|
OnHacktools = {action}
|
Action applied by Dr.Web for UNIX file servers to a hacktool (tool for remote administration, Trojan, etc.) detected during scanning initiated by NSS volumes monitor.
Possible values: Report, Quarantine, Delete
Default value:
OnHacktools = Report
|
OnError = {action}
|
Action applied by Dr.Web for UNIX file servers to files that caused an error during the scanning initiated by NSS volumes monitor.
Possible values: Report, Quarantine, Delete
Default value:
OnError = Report
|
ScanTimeout = {time interval}
|
Timeout for scanning one file initiated by NSS volumes monitor.
A value in the range from 1s to 1h can be specified
Default value:
ScanTimeout = 30s
|
HeuristicAnalysis = {On | Off}
|
Indicates whether heuristic analysis is used for detection of unknown threats during the scanning initiated by NSS volumes monitor. Heuristic analysis provides higher detection reliability but, at the same time, it increases time of virus scanning.
Action applied to threats detected by heuristic analyzer is specified as the OnSuspicious parameter value.
Allowed values:
•On—instructs to use heuristic analysis when scanning. •Off—instructs not to use heuristic analysis. Default value:
HeuristicAnalysis = On
|
PackerMaxLevel = {integer}
|
Maximum nesting level when scanning packed objects. All objects at a deeper nesting level are skipped during the scanning initiated by NSS volumes monitor.
A value in the range from 0 to 60 can be specified. If the value is set to 0, nested objects are not scanned.
Default value:
PackerMaxLevel = 8
|
ArchiveMaxLevel = {integer}
|
Maximum nesting level when scanning archives. All objects at a deeper nesting level are skipped during the scanning initiated by NSS volumes monitor.
A value in the range from 0 to 60 can be specified. If the value is set to 0, nested objects are not scanned.
Default value:
ArchiveMaxLevel = 0
|
MailMaxLevel = {integer}
|
Maximum nesting level when scanning email messages and mailboxes. All objects at a deeper nesting level are skipped during the scanning initiated by NSS volumes monitor.
A value in the range from 0 to 60 can be specified. If the value is set to 0, nested objects are not scanned.
Default value:
MailMaxLevel = 8
|
ContainerMaxLevel = {integer}
|
Maximum nesting level when scanning containers of other types. All objects at a deeper nesting level are skipped during the scanning initiated by NSS volumes monitor.
A value in the range from 0 to 60 can be specified. If the value is set to 0, nested objects are not scanned.
Default value:
ContainerMaxLevel = 8
|
MaxCompressionRatio = {integer}
|
Maximum compression ratio of scanned objects (ratio between the compressed size and uncompressed size). If the ratio of an object exceeds the limit, this object is skipped during the scanning initiated by NSS volumes monitor.
The compression ratio must not be smaller than 2.
Default value:
MaxCompressionRatio = 500
|