Prerequisites for a scan host
A scan host is a host machine that has the required malware tool configured. Once it is integrated with NetBackup, NetBackup initiates scanning on the scan host.
The following prerequisites apply for the scan host:
The malware tool must be installed and configured.
The scan host must have a share type configured that is either an NFS or an SMB client.
The scan host must be reachable from the media server over SSH.
Note:
SSH connection to scan host from the media server must be successful.
OpenSSH must be configured on windows scan host.
Note:
For Windows 2016, get OpenSSH from GIT hub repository and for Windows 2019, enable OpenSSH server feature. For more details, refer to Microsoft documentation.
Note:
You can select the scan host pool irrespectively of the share type and scan host platform.
The minimum required configuration for the scan host is 8 CPU and 32-GB RAM.
NetBackup footprint is not required on the scan host. The existing systems with the NetBackup client or media server can be used as scan host, too.
For the supported operating systems of the scan host, refer Software Compatibility List
For non-root user on Linux:
Allow
sshconnection using non-root user. For example: Add the Allow Users root scanuser entry in the/etc/ssh/sshd_configfile.Note:
Scanuser is a non-root user that is already created in the system.
Provide user permission to mount and umount .Add user permission entry in
sodoersfile. For example: In the/etc/sudoersfile add one of the following as required: -scanuser ALL=(ALL) NOPASSWD:ALL
scanuser ALL=(ALL) NOPASSWD:/bin/umount, /bin/mount
Configure malware tool using non-root user on the scan host.
Note:
If scanning is done using root user previously, then change the permission of the
/tmp/malwarefolder to give write permissions to the non-root user. For example chmod a+rwx /tmp/malware