
VMware, Inc. 97
Chapter 8 vShield Data Security Configuration
Allvirtualmachinesinyourdatacenterarescannedonceduringascan.Ifthepolicyiseditedandpublished
whileascanisrunning,thescanrestarts.Thisrescanensuresthatallvirtualmachinescomplywiththeedited
policy.Arescanistriggeredbypublishinganeditedpolicy,notbydata
updatesonyourvirtualmachines.
Afteryoustartascan,itcontinuestorununtilyoupauseorstopit.
Ifnewvirtualmachinesareaddedtoyourinventorywhileascanisinprogress,thosemachineswillalsobe
scanned.Ifavirtualmachineismovedtoanexcluded
clusterorresourcepoolwhilethedatasecurityscanis
inprogress,thefilesonthatvirtualmachinearenotscanned.IncaseavirtualmachineismovedviavMotion
toanotherhost,thescancontinuesonthesecondhost(filesthatwerescannedwhilethevirtualmachinewas
onthe
previoushostarenotscannedagain).
vShieldDataSecurityscansonevirtualmachineonahostatatimetominimizeimpactonperformance.
VMwarerecommendsthatyoupausethescanduringnormalbusinesshourstoavoidanyperformance
overhead.
Start, Pause, Resume, or Stop a Scan Operation
Youcanstartorstopascanoperation.Thescanoperationoptionsareasfollows:
START:Startanewscan.
PAUSE:Pauseastartedscan.
RESUME:Resumeapausedscan.
STOP:Stopanyscan.
Example 8-17. Start, pause, resume, or stop a scan operation
Request:
PUT https://<vsm-ip>/api/2.0/dlp/scanop
<ScanOp>STOP</ScanOp>
Query Status for a Scan Operation
YoucanretrievethestatusofthescanoperationtodetermineifascanisSTARTED(thatis,inprogress),PAUSED,
orSTOPPED.The
nextScanOpsparameterindicatesthescanoperationspossiblefromyourcurrentstate.Inthe
followingexample,thecurrentscanstateisStoppedandtheonlyactionyoucanperformisStartthescan.
Example 8-18. Get scan status
Request:
GET https://<vsm-ip>/api/2.0/dlp/scanstatus
Response:
<DlpScanStatus>
<currentScanState>STOPPED</currentScanState>
<nextScanOps><ScanOp>START</ScanOp></nextScanOps>
<vmsInProgress>0</vmsInProgress>
<vmsCompleted>0</vmsCompleted>
</DlpScanStatus>
Querying Scan Results
Youcanretrievedetailedresultsofthecurrentdatasecurityscanaswellassummaryresultsfortheprevious
fivescans.
Commentaires sur ces manuels