How are the SVM, AV Connector and VSES communicating

[GuyR]

I’m new to NetApp’s Cluster Data ONTAP MacAfee Antivirus Scan solution.  We in the process of trying to trouble shoot a performance issue.one area of concern is the communication between the client, SVM, AV connector, and VSES.

My question is what type of communication/traffic is passed between the SVM, AV connector and VSES?

[pedro_rocha]

Hello!

Did you see this doc in order to better understand an example of AV (McAfee) architecture with ONTAP?

https://www.netapp.com/pdf.html?item=/media/16298-tr-4286pdf.pdf

Regards,

Pedro

[GuyR]

Yes, thanks you for your response.  while TR-4286 is considered standard reading for Cluster Data ONTAP Antivirus newbies like myself.  It does really get into the inter workings of the Antivirus (McAfee) app.

Realizing that most of the details regarding the antivirus application falls on the vender specifics side of the fence.  I was hoping there would be some in a NetApp publication that spoke in a little more detail about the VSES, VSE, Dat file updates and how it all flowed to included ports, protocols and timing.

The answer I've been getting so far is  "Ask McAfee". I would be nice to have a consolidated document that explains in more detail that explains in more detail the relationship, dependency and workflow of data.

[Mjizzini]

Below some helpful informations and link.

By default, the AV Connector issues ONTAPI calls to get a list of data LIFS over HTTPS and port 443.

The AV Connector communicate internally with VSES.

AV Connector communicate with the SVM via  SMB using RPC pip "VSCAN"

The VSES use SMB to scan the file on the SVM.

Understanding NetApp virus scanning 

FAQ: What are the options available as Antivirus Connector Command Line Switches 

[tahmad · Accepted solution]

Hello @GuyR ,

Did the documents attached in previous posts provide the answers about the type of communications between SVM, AV Connector and VSES?