Home

 

Enable virus scanning


Overview

Edit configuration property settings to force the features that handle uploaded files to scan all files for viruses.

IBM Lotus Connections does not provide virus scanning software, but it does enable you to use existing virus scanning services implemented within your corporate infrastructure. Before you begin this procedure, find out the location of the virus scanning service.

Lotus Connections supports the Internet Content Adaptation Protocol (ICAP) and its features use this protocol to communicate with virus detection products. Ensure that the virus detection product used in your enterprise supports the ICAP 1.0 protocol. Lotus Connections is certified to work with...

The Bookmarks and Home page features do not implement virus scanning because no files or images are uploaded to those feature databases.


Enable virus scanning for Activities, Blogs, Communities, Files, Profiles, and Wikis

  1. Use the wsadmin client to access and check out the Lotus Connections configuration files.

    1. Access the Lotus Connections configuration file:

      • Stand-alone deployment:

          execfile("connectionsConfig.py")

      • Network deployment:

          execfile("WAS_HOME/profiles/Dmgr01/config/bin_lc_admin/connectionsConfig.py")

        If you are prompted to specify which server to connect to, type 1.

        This information is not used by the wsadmin client when you are making configuration changes.

    2. Check out the Lotus Connections configuration files...

      LCConfigService.checkOutConfig("<working_directory>","cell_name") where:

      • <working_directory> is the temporary working directory to which the configuration XML and XSD files are copied and are stored while you make changes to them. Use forward slashes to separate directories in the file path, even if you are using the Microsoft Windows operating system.

      • cell_name is the name of the WebSphere Application Server cell hosting the Lotus Connections feature. This argument is required even in stand-alone deployments. This argument is also case-sensitive, so type it with care. If you do not know the cell name, do one of the following to determine it:

        • Stand-alone deployment: From the file system...

            WAS_HOME\profiles\profile_name\config\cells\

        • Network deployment: Type the following command while in the wsadmin command processor:

            print AdminControl.getCell()

      For example:

      • AIX/Linux:

          LCConfigService.checkOutConfig("/opt/temp","foo01Cell01")

      • Microsoft Windows:

          LCConfigService.checkOutConfig("c:/temp","foo01Cell01")

  2. Edit LotusConnections-config.xml

  3. Uncomment the following block of XML, which can be found in the avFilter section:

      <!--avFilter class="AVScannerICAP">
        <property>av.scanner.servers=<myscanner.host.com></property>
        <property>exception.on.virus=yes</property>
        <property>av.scanner.service=<scanner.service></property>
      </avFilter-->
      

  4. Replace references to <scanner.service> with the name of the ICAP response modification service on the ICAP-enabled scanner.

      RESPMOD McAfee virus scanning software
      AVSCAN Symantec virus scanning software

    Or add the ICAP response modification service for the virus scanning software that you want to support.

  5. Replace references to <myscanner.host.com> with the server name or IP address of the system hosting the virus scanner. To specify more than one server, separate multiple server names or IP addresses with commas. For example:

      <avFilter class="AVScannerICAP">
        <property>av.scanner.servers=my.virus.scanning.server.com</property>
        <property>exception.on.virus=yes</property>
        <property>av.scanner.service=RESPMOD</property>
      </avFilter>
      

  6. To support scanning large files, specify values for the av.chunk.size and first.read.timeout properties: For example:

      <avFilter class="AVScannerICAP">
        ...
        <property>av.chunk.size=50000</property>
        <property>first.read.timeout=120000</property>
      </avFilter>
      

  7. Save your changes to the LotusConnections-config.xml file.

  8. After making changes, check the configuration files back in and do so during the same wsadmin session in which you checked them out for the changes to take effect.

 

Related tasks

Security
Change common configuration property values
Apply common configuration property changes

+

Search Tips   |   Advanced Search