App Control: What DFS Path Mapping Settings Are Available?
search cancel

App Control: What DFS Path Mapping Settings Are Available?

book

Article ID: 286597

calendar_today

Updated On:

Products

Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

What DFS Path Mapping settings are available?

Environment

  • App Control Console: All Supported Versions
  • App Control Agent: Version 8.9.2+
  • Microsoft Windows: All Supported Versions

Resolution

The following Agent Config settings are available:
 
ConfigDefault ValueTypeDescription
query_ad_dfs_namespacesquery_ad_dfs_namespaces=falseBoolean

Controls whether the Agent will query the user's domain for any DFS namespaces. Must be true for Agents to get DFS info from the Domain Controller.

Note: Only the user's direct domain is queried, no other domains are checked.

dfs_namespacesdfs_namespaces=""StringUsed when there are stand-alone DFS Servers not part of an Active Directory. These DFS Servers are queried for each user.
dfs_refresh_interval_secondsdfs_refresh_interval_seconds=14400IntegerDetermines how long each Agent will re-query the network. By default, 4 hours.

dfs_purge_age_days
Agent 9.0.0+

dfs_purge_age_days=120IntegerAge of items to be purged from the database. By default, 4 months.

Additional Information

  • DFS Path Mapping collects referral server paths for DFS folders.
  • When an Agent is referencing a file from one of the referral paths, the path is passed through rules as the original DFS Path.
  • Custom Rules can be written based on DFS Paths without having to track all the possible backing servers.