Dr.Web Network Checker

Network checker agent Dr.Web Network Checker is designed for scanning the data received through the network in the checking engine, as well as distributed file scanning for threats. The component allows to arrange a connection between network hosts with installed Dr.Web for UNIX Internet Gateways for receiving and transmitting data (for example, file content) via the network hosts to perform its scanning. The component organizes automatic distribution of scanning tasks (by transmitting and receiving them over the network) to all available network hosts to which it is configured. The component balances the load between the hosts caused by scanning tasks. If there are no configured connections with remote hosts, the component transmits all the data to the local Dr.Web Scanning Engine only.

Note that the component is always used to scan the data received via network connections. Thus, if the component is missing or unavailable, the performance of the components that transmit data for scanning via the network connection will be incorrect (Dr.Web ICAPD, Dr.Web ClamD).

In case of high intensity of scanning of data transferred via the network, there is a possibility of having problems with scanning due to depletion of the number of available file descriptors. In this case, it is necessary to increase the limit of the number of file descriptors available to Dr.Web for UNIX Internet Gateways.

During scanning, data can be shared either over an open channel or over a protected one, applying SSL/TLS. To use a secure HTTPS connection it is required to provide an appropriate SSL server certificate and private key for hosts that share files. If you need to generate SSL keys and certificates, you can use the openssl utility. An example of how to use the openssl utility to generate a certificate and a private key is given in the section Appendix E. Generating SSL certificates.

Details:

•Operating Principles

•Command Line Arguments

•Configuration Parameters