VMware VSHIELD APP 1.0 - API Manuel d'utilisateur télécharger pdf (Page 73)

VMware, Inc. 73

Chapter 8 vShield Data Security Configuration

Retrieve the Published SDD Policy

YoucanretrievethecurrentlypublishedSDDpolicythatisactiveonallvShieldEndpointSVMs.

Example 8-11. Retrieve the published SDD policy

Request:

GET https://<vsm-ip>/api/2.0/dlp/policy/published

Authorization: Basic YWRtaW46ZGVmYXVsdA==

Publish the Updated Policy

Afterupdatingapolicywithaddedregulations,excludedareas,orcustomizedregexvaluespublishthepolicy

toenforcethenewparameters.

Example 8-12. Publish the updated policy

Request:

PUT https://<vsm-ip>/api/2.0/dlp/policy/publish

Data Security Scanning

Runningadatasecurityscanidentifiesdatainyourvirtualenvironmentthatviolatesyourpolicy.

Allvirtualmachinesinyourdatacenterarescannedonceduringascan.Ifthepolicyiseditedandpublished

whileascanisrunning,thescanrestarts.Thisrescanensuresthatallvirtualmachinescomplywith

theedited

policy.Arescanistriggeredbypublishinganeditedpolicy,notbydataupdatesonyourvirtualmachines.

Afteryoustartascan,itcontinuestorununtilyoupauseorstopit.

Ifnewvirtualmachinesareaddedtoyourinventorywhileascanisinprogress,those

machineswillalsobe

scanned.Ifavirtualmachineismovedtoanexcludedclusterorresourcepoolwhilethedatasecurityscanis

inprogress,thefilesonthatvirtualmachinearenotscanned.IncaseavirtualmachineismovedviavMotion

toanotherhost,thescancontinues

onthesecondhost(filesthatwerescannedwhilethevirtualmachinewas

ontheprevioushostarenotscannedagain).

vShieldDataSecurityscansonevirtualmachineonahostatatimetominimizeimpactonperformance.

VMwarerecommendsthatyoupausethescanduringnormalbusinesshoursto

avoidanyperformance

overhead.

Retrieve the Status for a Scan Operation

YoucanretrievethestatusofthescanoperationtodetermineifascanisSTARTED(thatis,inprogress),PAUSED,

orSTOPPED.The

nextScanOpsparameterindicatesthescanoperationspossiblefromyourcurrentstate.Inthe

followingexample,thecurrentscanstateisStoppedandtheonlyactionyoucanperformisStartthescan.

Example 8-13. Retrieve the status of a scan

Request:

GET https://<vsm-ip>/api/2.0/dlp/scanstatus

Response:

<currentScanState>STOPPED</currentScanState>

<nextScanOps><ScanOp>START</ScanOp></nextScanOps>

1 2 ... 68 69 70 71 72 73 74 75 76 77 78 ... 103 104

Commentaires sur ces manuels

Pas de commentaire

VMware VSHIELD APP 1.0 - API Manuel d'utilisateur Page 73

Commentaires sur ces manuels

Produits connexes et manuels pour Mise en réseau VMware VSHIELD APP 1.0 - API