License editions: To understand the applicable license editions, see Plans & Pricing.
Overview
If you want to scan files before you restore them, you must enable the Restore Scan Settings. When enabled, you see an additional Restore Scan section in the restore window where you can select the options related to the file scan.
Here are the scanning options for Restore scans:
Quick Scan: A faster option with minimal impact on restore performance, ideal for regular use. It improves scan time by focusing on specific file types commonly associated with malware and recently modified files.
❗Important:
By default, the Quick Scan option is enabled.
Deep Scan: A comprehensive option that scans all file types for thorough detection. It is best suited for post-breach restores or when malware is suspected. Due to its exhaustive nature, Deep Scan may take longer, particularly for large backups.
We recommend you retain the default Quick Scan option. However, for a Deep scan, select All Files.
If you enforce the scan during data restore, administrators will not be able to disable the scan while initiating the restore. This ensures that the data restored is free of malware and viruses.
If you enforce the scan, end users will not see a message or notification stating that the data is being scanned before restoring.
Procedure
From the Druva Cloud Platform Console, go to Global Navigation menu -> Ransomware Recovery.
On the left pane, click the Restore Scan -> Settings tab.
In the Settings section, click Edit.
Toggle the Antivirus Scan button in the Scan Settings section to allow administrators to view the Restore Scan panel in the Restore window.
Toggle the File Hash Scan button in the Scan Settings section to enable file scan during restore for custom file hashes from the IOC library.
Select the checkbox to allow the scan with Druva-published IOC sets. This is applicable only if you have a Premium Security license. By default, it is enabled.
Toggle the Quick Scan button in the Scan Optimisation Setting section to enable Restore scan for selective files.
The Quick Scan option scans selective files such as those modified and created in the last 30 days, files smaller than 100 MB file size, and excludes specific file extensions that are not malware-prone - for example, jpeg, jpg, png, gif, bmp, mp3, mp4, log.
The Deep Scan option scans all files (up to 1 GB file size) without any exclusions for comprehensive coverage.
By default, the Quick Scan option is enabled.
Under the Override Scanning section, select if you want to show administrators and end users the ability to disable restore and quick scan settings during a restore operation. This applies to Enterprise Workloads (File Server and NAS) and Endpoints.
Note that a restore activity takes more time than usual when scanning is enabled.
Under the Override Scanning section, select the Skip Antivirus Scan during Device Replacement check box to disable the antivirus scan check before restoring data to the new device. By default, this option is deselected. Then, click Save. This applies to Endpoints only.
💡 Tip
We recommend that you refrain from selecting this option and allow an antivirus scan during device replacement to ensure that the restored data is safe and secure.
❗ Important
The System Settings are not scanned for antivirus.