SMB Streaming Configuration

This section walks you through the steps for enabling DDR streaming for a SMB connection and monitoring live streaming events within the DSPM platform.

Create a New Scan Configuration

  1. Navigate to Administration > Data Sources > SMB.
  2. Click New Configuration. Enter Name, Credentials, and enter the Path. Check the field Subscribe to events streaming (DDR). Make a note of the webhook host and URL.

  3. Follow the download tab link and installation instructions of SMB agent.

  4. Follow further steps to install the SMB agent.

SMB Agent Installation

This steps below addresses the different methods to install the SMB Connector on a single machine.

SMB Connector Pre-requisites:

  • OS: Windows Server 2016 or later.

  • Processor: 2 GHz or faster, 2 cores (64-bit processor recommended).

  • Memory: 4GB RAM.

  • Hard Disk: 1GB free space.

  • Administrator Privileges: user needs admin permissions to install.

  • .NET 8 must be installed.

Installation config

The SMB Connector supports various configuration options which can be specified via smb_connector_application_config.json

Manual Installation

Pre-requisites:

  1. The ZIP of the installer files.
  2. smb_connector_application_config.json file.
  3. Windows Server machine access.
  4. Admin access to install the connector.

Steps

  1. Download the SMB Connector ZIP File: Obtain the ZIP file and save it to the Windows machine.
  2. Prepare for Installation:

    • Unzip the contents of the ZIP file

    • Place the smb_connector_application_config.json file in the same directory as the unzipped contents.

  3. Configure the Installer:
    • Edit the smb_connector_application_config.json file as needed. Use the smb_connector_application_config.json.example file in the unzipped folder if creating the configuration from scratch.

    Create a folder mapping for every SMB share on the server that is to be scanned. The watched folder should be the root directory of the share, and the WebhookUrl should be from the scan configuration page for the SMB share on the dashboard (as shown below).

    • Keep useDefaultFileFilters set to false if you want all files in the share to be scanned. If set to true, the connector will only scan files supported by the GV Synergy agent for classification.

    • IncludedExtensions and AdditionalFileFilters can be used if you wish to apply filters other than the defaults. IncludedExtensions supports file extensions in the format .txt, etc. AdditionalFileFilters allows for any custom file filter, including * as a wildcard

    • Start the Installation:
      • Execute the install.ps1 script by right clicking and choosing Run with PowerShell.
    • Complete the Installation:
      • After the installation completes, the PowerShell window can be closed.
  4. Save the Streaming configuration.

Monitoring Real-Time Events

After the subscription is activated (green magnifying glass icon), real-time events will start flowing into the platform, and you will be able to monitor them from various sections of the console. For viewing events in the Live Events Section, navigate to the Live Events section under Administration to view a detailed audit log of all streaming events (you may specify source filter to focus only on SMB events).