To define the shares for a configured scan to which the File Protect appliance routes malicious, safe, whitelisted, and skipped files, use the fmps scan configure target shares command in configuration mode.
This command designates shares to which the appliance moves scanned files. The appliance will not scan these shares.
Quarantine shares store files that were analyzed and classified as malicious.
Caution
When you configure a quarantine share, you can specify either a quarantine share you added or "local_QF." If you specify "local_QF," the appliance will create a
local_QFfolder in the source file share the first time it encounters a malicious file, and will move all malicious files into it. Trellix recommends against doing this, because malicious files will not be isolated from the source files.Good shares store files that were analyzed and classified as non-malicious.
Whitelist shares store files that were not analyzed because you designated their file types as safe using the fmps scan configure filetypes command.
Unknown shares store files that were skipped for reasons such as their file types being disabled for scanning or unknown to the appliance, or the files themselves being empty.
For more information, see the File Protect User Guide.
Note
You can use this command only on scans that are in the "configured" state. You cannot configure active, paused, aborted, completed, or scheduled scans.
Syntax
[no] fmps scan configurescanIDtarget-shares {good|quarantine|unknown|whitelisted} shareName
Parameters
no
Removes the specified share.
scanID
The numeric identifier for the scan.
goodshareName
Specifies a share for non-malicious files.
quarantineshareName
Specifies a share for malicious files.
unknownshareName
Specifies a share for skipped files.
whitelistedshareName
Specifies a share for whitelisted files.
Example
The following example configures a quarantine share and an unknown share for scan 46.
hostname (config) # fmps scan configure 46 target-shares quarantine Acme-qua hostname (config) # fmps scan configure 46 target-shares unknown Acme-un
User role
Operator or Admin
Command mode
Config
Supported appliances
This command is supported on the following appliances running the specified releases or later:
File Protect: Release 7.5.0