What DFS Path Mapping Settings Are Available?

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

What DFS Path Mapping settings are available?

Environment

• App Control Console: All Supported Versions
• App Control Agent: Version 8.9.2+
• Microsoft Windows: All Supported Versions

Resolution

The following Agent Config settings are available:
 

Config	Default Value	Type	Description
query_ad_dfs_namespaces	query_ad_dfs_namespaces=false	Boolean	Controls whether the Agent will query the user's domain for any DFS namespaces. Must be true for Agents to get DFS info from the Domain Controller. Note: Only the user's direct domain is queried, no other domains are checked.
dfs_namespaces	dfs_namespaces=""	String	Used when there are stand-alone DFS Servers not part of an Active Directory. These DFS Servers are queried for each user. Pipe character used to separate multiple namespaces, example: dfs_namespaces=\\DfsSrv01\Namespace|\\DfsSrv02\Namespace
dfs_refresh_interval_seconds	dfs_refresh_interval_seconds=14400	Integer	Determines interval for re-requesting DFS information. By default, 4 hours.
dfs_purge_age_days Agent 8.10.0+ (EPCB-19487)	dfs_purge_age_days=120	Integer	Age of items to be purged from the database. By default, 4 months.

Additional Information

• DFS Path Mapping collects referral server paths for DFS folders.
• When an Agent is referencing a file from one of the referral paths, the path is passed through rules as the original DFS Path.
• Custom Rules can be written based on DFS Paths without having to track all the possible backing servers.