topic Netapp vSCAn in ONTAP Discussions

Netapp vSCAn

luciferHK — Tue, 01 Dec 2020 19:11:51 GMT

Hi,

using Netapp vscan to scan NFS mounts. what is the max file size supported? . is it recommended to scan large file? i read the vscan guide from Mcafee and its says they may slow the performance.

Is it possible to scan the encrypted or compressed files?

thanks

hemanth

Re: Netapp vSCAn

GidonMarcus — Tue, 01 Dec 2020 21:09:55 GMT

Hi.

The size depends on the vendor and your network/compute resources.

Most of them can scan compressed archive files, again - it's up to the vendor to dictate how deep (cascaded files).

Encrypted archives are non-scanable and you can usually filter them out within the vendor product settings (Some encrypted content is sometimes allowed, password-protected docs, encrypted content in signed EXE files, etc...).

It's important to remember that all that ONTAP do is to put the files in administrative share and call the VSCAN agent to tell the AV product to come and scan it, and then it passes back a true/false response for ONTAP do deny or allow the write/read.

Re: Netapp vSCAn

Mjizzini — Tue, 15 Dec 2020 07:57:55 GMT

It is possible to scan all files. Specifying the max size depend on your workload and the quantity of large files.

By default we recommends having 2GB.

[-max-file-size {<integer>[KB|MB|GB|TB|PB]}] - Max File Size Allowed for Scanning This parameter specifies the maximum size of the file which will be considered for virus scanning. By default, it is 2GB.