Supported file systems for Symantec Critical System Protection (SCSP) 5.2 RU9 Real-Time File Integrity Monitoring (RT-FIM).

Article:HOWTO77396  |  Created: 2012-08-07  |  Updated: 2012-08-09  |  Article URL http://www.symantec.com/docs/HOWTO77396
Article Type
How To



  Historically, the File Integrity Monitoring (FIM) feature has been polling-based. Realtime FIM (RT-FIM) changes that to monitor process access to files more directly, resulting in FIM events coming as soon as the file actions occur. RT-FIM also records the user and process that performed the action.


  File systems that support RT-FIM:

Linux:   Ext2, Ext3, Ext4, Reiserfs, and VFAT

AIX:      JFS, and JFS2

Windows: NTFS, FAT, FAT32, CDROM, and UDF

Watched files or directories residing on other filesystem types will default to polling based file monitoring.  
 



Article URL http://www.symantec.com/docs/HOWTO77396


Terms of use for this information are found in Legal Notices