The S3 on-premise integration on the File Protect appliance uses the on-premise object storage service to store and secure files. The File Protect appliance scans the files in the S3 on-prem storage for malware and quarantines the files marked as malicious. You can configure the location to quarantine these files.
In S3 on-prem storage, the files are stored in buckets. The File Protect appliance lists all the files available in the bucket and scans them. If a file is found to be malicious, it is moved to the quarantine location. You need to set the target quarantine and good locations for the corresponding files so that the File Protect appliance do not scan the same files more than once.
Note
Unknown and whitelist target locations are not supported in S3 on-prem storages. The File Protect appliance will move the unknown and skipped files to the good bucket.
local_qf is not supported for S3 on-prem storages.
Interoperability with other third party systems
The File Protect appliance will use AWS APIs to connect to the S3 on-prem service, get list of files on a bucket, download and scan the files and move them to quarantine or good location. Python Boto3 SDK will also be used for above tasks. Please refer to the following documentation for more details.
Note
The Netapp StorageGRID references mentioned below were used for development purposes only. The S3 on-premise integration is not limited to Netapp StorageGRID only.
Perform the following steps to use the S3 on-prem integration feature: