topic Re: How are the SVM, AV Connector and VSES communicating in ONTAP Discussions

How are the SVM, AV Connector and VSES communicating

GuyR — Wed, 04 Jun 2025 10:19:01 GMT

I’m new to NetApp’s Cluster Data ONTAP MacAfee Antivirus Scan solution. We in the process of trying to trouble shoot a performance issue.one area of concern is the communication between the client, SVM, AV connector, and VSES.

My question is what type of communication/traffic is passed between the SVM, AV connector and VSES?

Re: How are the SVM, AV Connector and VSES communicating

pedro_rocha — Thu, 15 Jul 2021 19:10:23 GMT

Hello!

Did you see this doc in order to better understand an example of AV (McAfee) architecture with ONTAP?

https://www.netapp.com/pdf.html?item=/media/16298-tr-4286pdf.pdf

Regards,

Pedro

Re: How are the SVM, AV Connector and VSES communicating

GuyR — Tue, 20 Jul 2021 12:52:51 GMT

Yes, thanks you for your response. while TR-4286 is considered standard reading for Cluster Data ONTAP Antivirus newbies like myself. It does really get into the inter workings of the Antivirus (McAfee) app.

Realizing that most of the details regarding the antivirus application falls on the vender specifics side of the fence. I was hoping there would be some in a NetApp publication that spoke in a little more detail about the VSES, VSE, Dat file updates and how it all flowed to included ports, protocols and timing.

The answer I've been getting so far is "Ask McAfee". I would be nice to have a consolidated document that explains in more detail that explains in more detail the relationship, dependency and workflow of data.

Re: How are the SVM, AV Connector and VSES communicating

Mjizzini — Wed, 21 Jul 2021 05:49:47 GMT

Below some helpful informations and link.

By default, the AV Connector issues ONTAPI calls to get a list of data LIFS over HTTPS and port 443.

The AV Connector communicate internally with VSES.

AV Connector communicate with the SVM via SMB using RPC pip "VSCAN"

The VSES use SMB to scan the file on the SVM.

Understanding NetApp virus scanning

FAQ: What are the options available as Antivirus Connector Command Line Switches

Re: How are the SVM, AV Connector and VSES communicating

tahmad — Tue, 10 Aug 2021 04:46:58 GMT

Hello @GuyR ,

Did the documents attached in previous posts provide the answers about the type of communications between SVM, AV Connector and VSES?