4. PRECAUTIONS REGARDING THE OS
<Example of use>
An example of using the "fbwfmgr" command is shown below. Execute the command from a
command prompt started with administrator privileges. In the example below, drive C is
protected.
● Enables FBWF and add protected volume
Executes "fbwfmgr /enable" command, "fbwfmgr /addvolume c:" command in that order,
and restart the equipment.
● Adds folder (file) to exclusion list
Executes the "fbwfmgr /addexclusion c:\test" command and restart the equipment.
(For files, specify "\test" as "\test\log.txt")
● Commits file to the protected volume (immediate execution)
Executes "fbwfmgr /commit c:\test\log.txt" command.
● Restores files from the protected volume (immediate execution)
Executes "fbwfmgr /restore c:\test\log.txt" command.
● Removes the protected volume (keep exclusion list) and disable FBWF
Executes the "fbwfmgr /removevolume c: 0" command and then the "fbwfmgr /disable"
command in this order, and restart the equipment.
<Features comparison of EWF and FBWF>
A comparison table of EWF and FBWF filter features is shown below.
No.
1
Operation level
2
Memory usage efficiency
3
Filter exclusion settings
4
Commit unit
5
Live Commit & Filter Invalidate
6
NTFS
7
HORM
8
Used with registry filter
9
Coexistence of EWF and FBWF
○:Supported -:Not supported
Table 4-5 Features Comparison of EWF and FBWF
Feature
File lock / unlock
File ID
Reparse point
Quota
Hard link
Opportunistic lock
File compression,
encryption
EWF
Sector base
Memory is not
released once secured
-
Overall overlay
○
○
○
○
○
○
○
○
○
○
Can coexist if volumes do not overlap
4-10
FBWF
File base
Memory is released
such as file deletion
Files / Folders
File only
-
-
-
-
-
-
-
-
-
○