DTAVSEL-003 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x must be configured to enable On-Access scanning.
For anti-virus software to be effective, it must be running at all times, beginning from the point of the system's initial startup. Otherwise, the risk is greater for viruses, Trojans, and other malware infecting the system during that startup phase.
From a desktop browser window, connect to the McAfee VirusScan Enterprise for Linux (VSEL) Monitor (WEB interface) of the Linux system being reviewed and logon with the nails user account. In the VSEL WEB Monitor, under 'Configure', select 'On-Access Settings'. Under 'Anti-virus Scanning Options', select the 'Enable On-Access scanning' check box. In the 'Quarantine directory' field, populate with '/quarantine' (or another valid location as determined by the organization). Click 'Apply'.