How do I activate real-time file integrity monitoring on Network File System (NFS) volumes?

book

Article ID: 169910

calendar_today

Updated On:

Products

Critical System Protection

Issue/Introduction

In Data Center Security 6.7 MP2 (6.7.2) we added support for real-time file integrity monitoring (RT-FIM) on mounted NFS volumes.  By default it is disabled and must be activated for use.

Environment

This functionality is supported on RedHate Enterpries Linux (and CentOS) 6.x and 7.x.

Resolution

To turn it on, run the following commands:

su - sisips ./sisipsconfig.sh -rtnfsc on

You must restart the IDS service for the changes to take effect.