This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Virtualization Scan Controller configuration update

Hello pretor989 here

Once again with a question concerning the Virtualization Scan Controller (it is pretty difficult to find good information about it - or maybe I just don't know where to search...)

Anyway here we go:

After the initial testing of the Scan Controller in a test-server constellation without noticeable problems we implemented it in our actual server environment.

To prevent the servers from buckling under the workload of scanning many different virtual mashines at one or producing errors because it tries to scan a server which no longer exists we use a script to query on which host which servers are.

After the query the script compiles a whole new configuration file for the scan controller with the updated information.

Now here lies the problem or rather the confusing part:

The script and the scans work BUT the parameters which are defined in the configuration file are not always implemented right away.

An example perhaps:

From Monday to Thursday the script has put Server A1 into group A with the following parameters:

AllowedDays = Mon,Tue,Wed,Thu,Fri

EarliestScanStart = 17:00 (05:00pm)

LatestScanStart = 05:00 (05:00am)

On Friday Server A1 was manually put into Group B while the script was modified to ignore Server A1.

Group B has similar parameters like Group A except for different values:

AllowedDays = Sat,Sun

EarliestScanStart = 07:00 (07:00am)

LatestScanStart = 17:00 (05:00pm)

Now the really confusing part is that Server A1 was scanned on Saturday and Sunday and not on Friday - just like it was defined in Group B

BUT the scan itself started at 17:20 (05:00pm) like it was defined in Group A ... now that threw me for a loop.

Does the Virtualization Scan Controller utilize some kind of internal data store or something similar? If yes what should be taken into consideration so the update of the data is successfull?

Or is it possible that while loading the new configuration file something was not overwritten?...

I would be glad if someone could shed some light onto this situation so I want to thank you in advance.

Sincerely pretor989

:26745


This thread was automatically locked due to age.
Parents
  • Hi,

    Does looking in the database tables:

    vmscan.VMComputers

    vmscan.VMGroupComputerMapping

    vmscan.VMGroups

    dbo.ComputersAndDeletedComputers

    shed any light?  

    The groups configuration goes into VMGroups table, and the others link to the ComputersAndDeletedComputers table.

    Hope it offers a pointer.

    Regards,

    Jak

    :26763
Reply
  • Hi,

    Does looking in the database tables:

    vmscan.VMComputers

    vmscan.VMGroupComputerMapping

    vmscan.VMGroups

    dbo.ComputersAndDeletedComputers

    shed any light?  

    The groups configuration goes into VMGroups table, and the others link to the ComputersAndDeletedComputers table.

    Hope it offers a pointer.

    Regards,

    Jak

    :26763
Children
No Data