Community maintenance is complete. Thank you for your patience!

ONTAP Discussions

How are the SVM, AV Connector and VSES communicating

GuyR

I’m new to NetApp’s Cluster Data ONTAP MacAfee Antivirus Scan solution.  We in the process of trying to trouble shoot a performance issue.one area of concern is the communication between the client, SVM, AV connector, and VSES.

My question is what type of communication/traffic is passed between the SVM, AV connector and VSES?

1 ACCEPTED SOLUTION

tahmad

Hello @GuyR ,

Did the documents attached in previous posts provide the answers about the type of communications between SVM, AV Connector and VSES?

View solution in original post

4 REPLIES 4

tahmad

Hello @GuyR ,

Did the documents attached in previous posts provide the answers about the type of communications between SVM, AV Connector and VSES?

View solution in original post

pedro_rocha

Hello!

 

Did you see this doc in order to better understand an example of AV (McAfee) architecture with ONTAP?

 

https://www.netapp.com/pdf.html?item=/media/16298-tr-4286pdf.pdf

 

Regards,

Pedro

GuyR

Yes, thanks you for your response.  while TR-4286 is considered standard reading for Cluster Data ONTAP Antivirus newbies like myself.  It does really get into the inter workings of the Antivirus (McAfee) app.

Realizing that most of the details regarding the antivirus application falls on the vender specifics side of the fence.  I was hoping there would be some in a NetApp publication that spoke in a little more detail about the VSES, VSE, Dat file updates and how it all flowed to included ports, protocols and timing.

The answer I've been getting so far is  "Ask McAfee". I would be nice to have a consolidated document that explains in more detail that explains in more detail the relationship, dependency and workflow of data.

Mjizzini

Below some helpful informations and link.

 

By default, the AV Connector issues ONTAPI calls to get a list of data LIFS over HTTPS and port 443.

The AV Connector communicate internally with VSES.

AV Connector communicate with the SVM via  SMB using RPC pip "VSCAN"

The VSES use SMB to scan the file on the SVM.

 

Understanding NetApp virus scanning 

FAQ: What are the options available as Antivirus Connector Command Line Switches 

 

Announcements
NetApp on Discord Image

We're on Discord, are you?

Live Chat, Watch Parties, and More!

Explore Banner

Meet Explore, NetApp’s digital sales platform

Engage digitally throughout the sales process, from product discovery to configuration, and handle all your post-purchase needs.

NetApp Insights to Action
I2A Banner
Public