Views:
File Security Storage provides easy deployment using the Cloud Account Management Terraform template to integrate automated scanning of files as you upload them into your storage and effortlessly detect all types of malware including viruses, trojans, spyware, and more. Currently, File Security Storage only supports single subscription accounts.

Verify the service quota Parent topic

File Security Storage deploys Azure Functions using an EP1 (Elastic Premium 1) service plan by default. App Service Plans often have restrictive default quotas that you need to configure before deployment. You only need to configure the quota in the template deployment region, as Azure Function resources are created only there and the quota applies to Azure Functions. This single service plan is shared by all three function apps: Scanner, Post-Scan Action, and Event Forwarder.
You must verify and, if necessary, request a quota increase for the Apps Service Plans (EP1 or Premium V3) in your deployment region.

Procedure

  1. Navigate to Azure Portal
  2. Search for Subscriptions in the top search bar and select the subscription you plan to use in Trend Vision One.
  3. In the left menu, click Usage + quotas
  4. Filter the quota list to find Function App related quota
    1. Click the Provider filter.
    2. Search for App Service or Elastic Premium.
  5. Locate the required service plan.
    Note
    Note
    Trend Vision One File Security Storage uses EP1 (Elastic Premium) service plan by default
  6. Check your current quota versus you usage to see if you have enough quota.
  7. Request a quota increase if needed:
    1. Ensure you have at least 1 available quota for deployment.
    2. If insufficient, select the quota entry, click Request adjustment, and submit the request.
    Note
    Note
    This is usually approved within 24-48 hours.

Deploy the Terraform template Parent topic

Procedure

  1. Go to Cloud Storage → File Security
  2. On the Inventory page, under Storage, select Azure.
  3. Click Add Single Subscription to protect containers.
  4. Select Single Subscription.
  5. On the General information page, select:
    • the region in which you are deploying the Terraform template.
      Note
      Note
      Currently, scanners can only be created in one region, which is pre-selected.
    • the Server & Workload Protection Manager.
  6. Click Next.
  7. On the Features and Permissions page, enable File Security Storage.
  8. Open your Azure console in a new tab.
  9. Set the stack parameters:
    1. In Azure Cloud Shell create your deployment folder.
    2. Upload the stack template zip file to your cloud environment.
    3. Extract the files from the zip file.
    4. Change the directory to the deployment folder.
    5. Run the Terraform deployment script.
      When the script successfully deploys the stack, the subscription appears under Azure on the Inventory page.
  10. Click Done.

Next steps

Now you need to enable the scanner for the storage accounts in each region that you enabled in your template