Hotfix for Symantec Enterprise Vault (EV) for File System Archiving (FSA) 9.0.2, Build 1061 - FileScreenFilter driver may cause cluster failover to hang.

Article:TECH170485  |  Created: 2011-09-27  |  Updated: 2014-06-24  |  Article URL http://www.symantec.com/docs/TECH170485
NOTE: If you are experiencing this particular known issue, we recommend that you Subscribe to receive email notification each time this article is updated. Subscribers will be the first to learn about any releases, status changes, workarounds or decisions made.
Article Type
Technical Solution


Issue



Which version of Symantec Enterprise Vault (tm) can this hotfix be applied?
This hotfix can only be applied to the following versions of Enterprise Vault for:

Enterprise Vault for File System Archiving 9.0.2, Build 1061 


Solution



What issue(s) does this hotfix resolve?

At certain times the cluster failover may not complete properly due to an issue with the FileScreenFilter driver scanning the \System Volume Information folder.  


Which files does this hotfix replace? 

File Name File Version
FileScreenFilter.sys 9.0.2.1061
FileScreenService.exe 9.0.2.1061


How to Install this hotfix:

1.  Stop the Enterprise Vault File Blocking Service.

 

2.  Once the service is stopped, run the following command from a command prompt:

 

   fltmc unload FileScreenFilter

 

3.  Take a backup of the FileScreenFilter.sys file located in the c:\WINDOWS\system32\drivers folder.

 

4.  Take a backup of FileScreenService.exe file in the EV installation folder (default is C:\Program Files\Enterprise Vault).

 

5.  Copy the updated FileScreenFilter.sys file to the c:\WINDOWS\system32\drivers folder, replacing the original.

Note:  There is an x86 and and x64 version of the driver. 

 

6.  Copy the updated FileScreenService.exe to the EV installation folder, replacing the original.

 

7.  Run the following command from the command prompt:

 

   fltmc load FileScreenFilter

 

8.  Start the Enterprise Vault File Blocking Service.

Note: The above needs to be performed on each of the cluster nodes.

 


How to Uninstall this hotfix:

1.  Stop the Enterprise Vault File Blocking Service.

 

2.  Once the service is stopped, run the following command from a command prompt:

 

   fltmc unload FileScreenFilter

 

3.  Replace the updated FileScreenFilter.sys file, located in the c:\WINDOWS\system32\drivers folder, with the original version.

 

4.  Replace the updated FileScreenService.exe file in the EV installation folder with the original version. 

 

5.  Run the following command from the command prompt:

 

     fltmc load FileScreenFilter

 

6.  Start the Enterprise Vault File Blocking Service.

Note: The above needs to be performed on each of the cluster nodes.

 


Attachments

EV 9.0.2.1061 Hotfix for FileScreenFilter.sys
Hotfix_for_Etrack 2479174.zip (544 kBytes)

Supplemental Materials

SourceETrack
Value2479174
Description

Analysis suggests MSCS cluster failover hang caused by filescreenfilter.sys




Article URL http://www.symantec.com/docs/TECH170485


Terms of use for this information are found in Legal Notices