Dr.Web Enterprise Security Suite can be used for protecting virtual infrastructure — virtual machine clusters providing services to clients (hereinafter referred to as client VMs): virtual hosting, remote desktop services, corporate clouds, etc.
One of the virtual machines in the cluster is assigned the service VM; by means of the special software (the Scanning Server) installed on it the service VMs processes requests for anti-virus scanning from other VMs.
The Scanning Server includes:
•the Scanning Engine that scans the received data for threats;
•virus bases and filter bases for Office control.
On the client VMs the Virtual Agent is installed; it operates under the control of Dr.Web Central Protection Server and transmits to the service VM requests for anti-virus scanning as well as the files to be scanned.
This mode of operation allows to reduce the load on client virtual machines due to the following factors:
•scanning is performed outside client VMs;
•there is no necessity to keep updated the malware databases and filter databases on client VMs;
•using a virtual (rather than physical) network for data transfer between VMs located on the same server (hypervisor), which ensures high data exchange rate and scanning speed.
The Scanning Server can be a member of any group. It is also possible to combine Scanning Servers into a separate group, including on the basis of predefined rules.
|
Including the Scanning Server into groups and defining membership rules is performed in the same way as for all other stations. The detailed information on group management can be found in the section Including Stations into Groups. |
Stations interact with the Scanning server via the Agent operating in virtual mode. The Agent operates under the Central protection server and sends requests for scanning files and URLs to the Scanning Server.