topic Re: Antivirus scanning and using Multistore ? in Network and Storage Protocols

Antivirus scanning and using Multistore ?

ThomasBebee — Thu, 05 Jun 2025 07:23:32 GMT

We are looking to use Multistore to provide CIFS shares to multiple Active Directory Domains. The customer wants to do virus scanning of the shares. They will use two scan engines, but are wondering if they need to provide a "scan engines" for each virtual filer? In this case, they need to support 4 different Active Directory Domains, so the question is do they need to have 4 pairs of scan engines for the one physical filer? My guess is that the answer is "yes", but if not required, would probably be recommended.

Any experience/information on the requirements of virtual filers and virius scannners would be appreciated.

Thank you.

Tom

Re: Antivirus scanning and using Multistore ?

scottgelb — Mon, 28 Sep 2009 19:41:46 GMT

It is optional to use vscan in the virtual filer or the physical fas controller (vfiler0). Most of my customers do antivirus, ndmp backups, etc. from vfiler0, so they only need to configure from the physical controller then the vfiler uses the physical filer. It is optional to run av, snapmirror, ndmp from the vfiler too and which to use depends on the environment (security, etc.). You could use 2 AV scanners if enough bandwidth for the FAS cluster.

Re: Antivirus scanning and using Multistore ?

scottgelb — Mon, 28 Sep 2009 19:42:54 GMT

One other thing...by default, "mandatory_scan" is on by default...so if the scanner(s) are not available, data is not served. Most of my customers modify this setting so that data is still served but in some cases that might be the default you want.