Network and Storage Protocols

Poor performance while virus scanner is active


Hi !

I have one FAS2020 filer with SATA disks which almost 1 year-old. I also installed one antivirus server running TrendMicro ServerProtect for NetApp filer v5.8. Within the last 3 months, there has been 3 incidents that users were experiencing poor performance while accessing files. I found out that this was caused by the antivirus process, if I turned off the vscan function then the performance returned to normal. When the first incident happened, I restarted the antivirus server but it did not help. After the second incident, I built another antivirus server and it was working fine until the third incident happened last week.

Does anyone have any idea as to the possible root cause of these incidents? At the moment I turned the vscan off but I am worry about virus outbreak if I keep it off.




Root cause - more load on your CIFS shares as traffic has grown.

There's a lot of information to be looked at:

CPU load on the scanning servers.

Network bandwidth on connection to scanning servers.

Current load on the filer (CPU, Disk, cache).

Have you set 'vscan extensions include/exclude' to avoid scanning files that aren't likely to be a threat ?

Have you considered implementing '-novscanread' on shares deamed to be clean ?

At your service,

Eugene Kashpureff

Register for Insight 2021 Digital

INSIGHT 2021 Digital: Meet the Specialists 2

On October 20-22, gear up for a fully digital, totally immersive virtual experience with a downright legendary lineup of world-renowned specialists. Tune in for visionary conversations, solution deep dives, technical sessions and more.

NetApp on Discord Image

We're on Discord, are you?

Live Chat, Watch Parties, and More!

Explore Banner

Meet Explore, NetApp’s digital sales platform

Engage digitally throughout the sales process, from product discovery to configuration, and handle all your post-purchase needs.

NetApp Insights to Action
I2A Banner