1. Executive Summary

Axians Global (“Axians”) assessed the interoperability of Trellix Endpoint Security (hereinafter referred to as “Trellix”) with Huawei OceanStor Dorado All-Flash Storage. The goal of the assessment is to validate that Trellix is interoperable with Huawei OceanStor Dorado All-Flash Storage.

In the assessment, Axians has determined that Trellix and restore jobs will function with Huawei OceanStor Dorado All-Flash Storage for the following scenarios:

Storage Tested	Test Scenario	Result
OceanStor Dorado All-Flash Storage	Antivirus—Trellix Endpoint Security	Passed

In this document, you will find details on the above test cases and the captured output. The procedures conducted in the tests are referenced from standard online documentation from Trellix and Huawei.

2. Environment Configuration

2.1 Networking Diagram

Figure 2.1 Network of The Antivirus Service

Note: This networking diagram is for reference only. For details about the connections between OceanStor Dorado controller enclosures and application servers, between controller enclosures and disk enclosures, and between controller enclosures, see the OceanStor Dorado product documentation.

Process of Configuring the Antivirus Service

1) The process of configuring the antivirus service includes adding the antivirus server and storage system to an AD domain, configuring the antivirus server, and configuring the antivirus service on the storage system.

Figure 1 shows the process of configuring the antivirus service.

2.2 Hardware and Software Configuration

2.2.1 Storage Configuration

Table 2-1 Huawei Storage Configuration Table

Name	Model & software version	Quantity
OceanStor Dorado All-Flash Storage	OceanStor Dorado V7	1

Connect the storage devices to the antivirus server and configure file system scanning tasks according to the Huawei antivirus configuration process.

Screenshot of successful configuration:

2.2.2 Test Software and Tools

Table 2-2 Test Software and Tool List

Software Name	Description	Quantity
Trellix Endpoint Security 10.7	Antivirus Software	1
Windows Server 2019	Installing Windows Hosts	1
Antivirus Agent	Plug-in	1

Screenshot of Trellix Endpoint

3.OceanStor Dorado Interconnection with Trellix

3.1 OnAccess – Different Language Characters File Name Testing

Test Purpose	File name contains different language characters testing
Test Networking	Huawei OceanStor Function Compatibility Test Networking
Prerequisites	1. The storage is running normally, and the file system sharing service has been configured. 2. AD domain server is working normally. Storage, application server and antivirus server have joined AD domain. 3. Antivirus software has been installed on the antivirus server and is working normally. 4. Antivirus configuration has been completed on the storage and antivirus server, where each controller on the storage has a business port and antivirus server connection.
Test Procedure	1. Write virus files and normal files with different language characters name into the shared storage on the application server: Simplified Chinese, Traditional Chinese (e.g. 寧鈴禮劉), English (e.g. English), Japanese (e.g. にほんご), Korean (e.g. 조선말), Spanish (e.g. Habláis), Arabic (e.g. مع سّلامة) , French (e.g. Désolé), Russian (e.g. Поучиться), numbers (e.g. 123). 2. View the written files on the application server.
Expected Result	1.The virus file in the shared storage no longer exists, and the normal file exists.
Test Result	Passed

3.2 OnAccess – Longest File Name Testing

Test Purpose	Longest file name testing
Test Networking	Huawei OceanStor Function Compatibility Test Networking
Prerequisites	1. The storage is running normally, and the file system sharing service has been configured. 2. AD domain server is working normally. Storage, application server and antivirus server have joined AD domain. 3. Antivirus software has been installed on the antivirus server and is working normally. 4. Antivirus configuration has been completed on the storage and antivirus server, where each controller on the storage has a business port and antivirus server connection.
Test Procedure	1. Write a virus file and a normal file into the shared storage on the application server, with the file name length being the maximum length supported by the operating system. 2. Check the virus files in the shared storage.
Expected Result	1. The virus file in the shared storage no longer exists, and the normal file exists.
Test Result	Passed

3.3 OnAccess – Longest Folder Name Testing

Test Purpose	Longest folder name testing
Test Networking	Huawei OceanStor Function Compatibility Test Networking
Prerequisites	1. The storage is running normally, and the file system sharing service has been configured. 2. AD domain server is working normally. Storage, application server and antivirus server have joined AD domain. 3. Anti-virus software has been installed on the antivirus server and is working normally. 4. Antivirus configuration has been completed on the storage and antivirus server, where each controller on the storage has a business port and antivirus server connection.
Test Procedure	1.Create a folder in storage with a name of the maximum length supported by the operating system. 2. Write a virus file and a normal file into the folder on the application server. 3. Check the virus files in the shared storage.
Expected Result	1. The virus file in the shared storage no longer exists, and the normal file exists.
Test Result	Passed

3.4 OnDemand – Virus File Processing Scheme Testing–Deletion

Test Purpose	Virus file processing scheme test–deletion.
Test Networking	Huawei OceanStor Function Compatibility Test Networking
Prerequisites	1. The storage is running normally, and the file system sharing service has been configured. 2. AD domain server is working normally. Storage, application server and antivirus server have joined AD domain. 3. Anti-virus software has been installed on the antivirus server and is working normally. 4. Antivirus configuration has been completed on the storage and antivirus server, where each controller on the storage has a business port and antivirus server connection.
Test Procedure	1. Set the processing policy for virus files to delete on the antivirus software. 2. Write a virus file (eicar.com) into the storage in the client. 3. Check the processing log of the virus file on the antivirus software, and check whether the virus file exists in the storage share on the client side. Check the number of scanned files and the number of scanned failed files in Device Manager.
Expected Result	1. The virus file in the shared storage no longer exists.
Test Result	Passed

3.5 OnDemand – Multi-Layer Directory Testing

Test Purpose	Multi-Layer directory testing
Test Networking	Huawei OceanStor Function Compatibility Test Networking
Prerequisites	1. The storage is running normally, and the file system sharing service has been configured. 2. AD domain server is working normally. Storage, application server and antivirus server have joined AD domain. 3. Anti-virus software has been installed on the antivirus server and is working normally. 4. Antivirus configuration has been completed on the storage and antivirus server, where each controller on the storage has a business port and antivirus server connection.
Test Procedure	1. Create at least 20 levels of subdirectories in the share. 2. Pre-set a virus file and a normal file in shared storage. 3. Start an OnDemand scan. 4. View the preconfigured files on the application server.
Expected Result	1. The virus file in the shared storage no longer exists.
Test Result	Passed

3.6 OnDemand – Appdata Process Malfunction Testing

Test Purpose	Appdata process failure test
Test Networking	Huawei OceanStor Function Compatibility Test Networking
Prerequisites	1. The storage is running normally, and the file system sharing service has been configured. 2. AD domain server is working normally. Storage, application server and antivirus server have joined AD domain. 3. Anti-virus software has been installed on the antivirus server and is working normally. 4. Antivirus configuration has been completed on the storage and antivirus server, where each controller on the storage has a business port and antivirus server connection.
Test Procedure	1. Pre-set the virus file in the storage and start OnDemand scan. 2. Make the process « Appdata » malfunction during the scanning process. 3. Check the virus files in the shared storage after the scan is finished.
Expected Result	1. The virus file in the shared storage no longer exists.
Test Result	Passed

3.7 OnDemand – Service Port Malfunction Testing

Test Purpose	Service Port Failure Test
Test Networking	Huawei OceanStor Function Compatibility Test Networking
Prerequisites	1. The storage is running normally, and the file system sharing service has been configured. 2. AD domain server is working normally. Storage, application server and antivirus server have joined AD domain. 3. Anti-virus software has been installed on the antivirus server and is working normally. 4. Antivirus configuration has been completed on the storage and antivirus server, where each controller on the storage has a business port and antivirus server connection.
Test Procedure	1. Pre-set the virus file in the shared storage and start OnDemand scanning. 2. Disconnect a service port on the storage that connects to the antivirus server, and wait at least 1 minute before resuming. 3. Disconnect other service port on the storage that connects to the antivirus server, and wait at least 1 minute before resuming. 4. Check the virus files in the shared storage.
Expected Result	1. The virus file in the shared storage no longer exists.
Test Result	Passed

3.8 OnAccess – High-Pressure AntiVirus Testing

Test Purpose	High-pressure antivirus testing
Test Networking	Huawei OceanStor Function Compatibility Test Networking
Prerequisites	1. The storage is running normally, and the file system sharing service has been configured. 2. AD domain server is working normally. Storage, application server and antivirus server have joined AD domain. 3. Anti-virus software has been installed on the antivirus server and is working normally. 4. Antivirus configuration has been completed on the storage and antivirus server, where each controller on the storage has a business port and antivirus server connection.
Test Procedure	1. On the application server, use the test tool to write files into the shared storage until the test case is completed. 2. Use the script to write 1 virus file per second into the application server. 3. Check the virus files in the shared storage.
Expected Result	1. The virus file in the shared storage no longer exists.
Test Result	Passed