Setting example of ENS 10.6.6 ODS task

[skubo]

ENS for Linux 10.6.6 以降、コマンドラインがmfetpcliに変更になりました。

Antivirus command line was changed into "mfetpcli" after ENS for Linux 10.6.6 .

ここでは、ENSL10.6.6でのオンデマンドスキャンのタスク追加を試してみます。

At this article, I will try to add On-Demand-Scan Task.

環境は以下の通り：

OS：CentOS 7.6

ID：root

ENSL：ENS for Linux 10.6.6 standalone

[root@centos7-6 ~]# uname -a
Linux centos7-6 3.10.0-957.el7.x86_64 #1 SMP Thu Nov 8 23:39:32 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux
[root@centos7-6 ~]#
[root@centos7-6 ~]# id
uid=0(root) gid=0(root) groups=0(root) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
[root@centos7-6 ~]#
[root@centos7-6 ~]# date
2019年 11月 13日 水曜日 13:09:20 JST
[root@centos7-6 ~]#

1.

最初に、以下コマンドでODSを設定します。

名前は「testods01」です。

At first, I set up ODS task with this command.

The name is「testods01」.

[root@centos7-6 ~]#
[root@centos7-6 ~]# /opt/McAfee/ens/tp/bin/mfetpcli --addodstask --name testods01 --scanlocaldrives enable --scanpaths /opt/ --scantmpfolders enable --scansubfolders enable --excludepaths /opt/testing1/ --excludepathwithsubfolder /opt/testing2/ --setmaxcpulimit 34 --maxscantime 56
ODS Task was successfully added
[root@centos7-6 ~]#

なお、引数の意味は以下マニュアルを参照してください。

See the link below for details about the arguments.

https://docs.mcafee.com/bundle/endpoint-security-10.6.6-threat-prevention-product-guide-linux/page/G...

今回は、以下引数を使って最大CPU使用率を34%に、最大スキャン時間を56秒に設定してみました。

At this time , I set up max-CPU-ratio 34%, and Max-scan-time 56 seconds.

--setmaxcpulimit 34 --maxscantime 56

なお、最大CPU使用率は、25から100までの間で設定でき、デフォルトで80が設定されています。

Max-CPU-ratio can be set between 25(%) and100(%), and default value is 80(%).

2.

次に、以下コマンドでタスクリストを出力し、ODSが設定されたことを確認します。

Second, I list the tasklist and see the new task I made with this command.

[root@centos7-6 ~]#
[root@centos7-6 ~]# /opt/McAfee/ens/tp/bin/mfetpcli --listtasks
---------------------------------------------------------------------------------------------------------------------------------------
|Index Task Name Task Type Task Status Last Run |
---------------------------------------------------------------------------------------------------------------------------------------
|1 webserver2 ODS Not Started Not Applicable |
|2 webserver11 ODS Not Started Not Applicable |
|3 webserver16 ODS Not Started Not Applicable |
|4 webserver12 ODS Not Started Not Applicable |
|5 webserver14 ODS Not Started Not Applicable |
|6 webserver4 ODS Not Started Not Applicable |
|7 webserver3 ODS Not Started Not Applicable |
|8 webserver1 ODS Not Started Not Applicable |
|9 webserver13 ODS Not Started Not Applicable |
|10 quick scan ODS Not Started Not Applicable |
|11 full scan ODS Not Started Not Applicable |
|12 Default Client Update task DAT and Engine Update Not Started 2019年11月12日 00時15分18秒 |
|13 testods01 ODS Not Started Not Applicable |
---------------------------------------------------------------------------------------------------------------------------------------
[root@centos7-6 ~]#

3.

最後に、testods01の番号を指定して、詳細を表示します。

At last, I specify the number of "testods01", and show the details.

[root@centos7-6 ~]# /opt/McAfee/ens/tp/bin/mfetpcli --showtask --index 13
Parameter Value
On Demand Task Name : testods01
Scan compressed archive files : enable
Scan compressed MIME-encoded files : disable
Scan PUPS : enable
Scan Unknown Programs : enable
Scan Unknown Macros : enable
Scan Sub Folders : enable
Scan Local Drives : enable
Scan Tmp Folders : enable
Scan Network drives : disable
List of Scan Paths : Defined
Scan Path : /opt/
What to Scan : all
Scan Macros : disable
Scan Files with no extension : disable
Excluded File : Not defined
Excluded Path (Subfolder disabled) : /opt/testing1/
Excluded Path (Subfolder enabled) : /opt/testing2/
List of Excluded File Types : Not defined
Use Scan cache : enable
Primary scan action : clean
Secondary scan action : delete
Primary scan action for pups : clean
Secondary scan action for pups : delete
Schedule : Not defined
Number of threads : 5
Maximum scan time : 56
Maximum CPU Limit : 34
GTI Status : enable
GTI Sensitivity Level : Medium
[root@centos7-6 ~]#

■もしこのエントリがお役に立てたなら、ぜひ「Kudo (イイネ！)」を押してくださいね。

■If this entry helps you, please click [Kudo] !

[balap]

Hello @skubo 

Thanks for this article, I have doubt is possible can we run the ODS Task in CLI on Centos or Redhat, not other than Mcafee EPO GUI, do you have any command for ODS Task.

Thanks in advance.

[gururaj]

Hi,

follow below the DOC how to configure the ODS Task from the command line.

https://docs.mcafee.com/bundle/endpoint-security-10.6.6-threat-prevention-product-guide-linux/page/G...