Data Loss Prevention

Hi all,

Can anyone help with this current issue we are having.

We are just about too Implement Network Discover and looking to scan shared drives. The shared drives will contain currently used files as well as stub files, these are archived files that the user has access too but has to be recalled from the backup tapes.

We tested the Vontu scanner a few months back and when recalling the archived files, Vontu would stop scanning and freeze. Therefore, we made a decision to de-scope all stub files from this phase of Network Discover project.

We tested the Vontu scanner again this weekend, we wanted to scan everything on the shared drive using a basic policy but for Vontu too ignore the stub files. The only attribute we could use was the file size attribute. We ran two scans, one scanning all files below 4k which was fine and the second scan was looking for files above 4k which is file size attribute for the stub files. As soon as the scan started, it started extracting a stub file and therefore the scan had to be terminated.

The only other two attributes for these stub files is;

a) Sparse file

b) and Offline file

Both elements we cannot seem to add too Vontu.

Is there anyone that is having the same problem and could help or a Symantec Technician that can help on this query?

I work with nman, it's worth noting that the archive system being used in the example above is IBM Tivoli Archive Manager.  It replaces an archived file with a stub file with the same name but a real size of 4Kb but CIFS displays the logical file size of the originally archived file

link:  http://en.wikipedia.org/wiki/IBM_Tivoli_Storage_Manager.

Hi Nman,

Consult with symantec team or create support ticket for this.

Hi K S Sharma,

Thanks for responding to my note.

We have raised a support ticket and are working very close with the Symantec team.

I posted this note really too see if other organisations were having similar issues and how they went about resolving the issue.

I appreciate your feedback.