Netapp vSCAn

[luciferHK]

Hi,

using Netapp vscan to scan NFS mounts.  what is the max file size supported? . is it recommended to scan large file? i read the vscan guide from Mcafee and its says they may slow the performance. 

Is it possible to scan the encrypted  or compressed files? 

thanks

hemanth

[GidonMarcus]

Hi.

The size depends on the vendor and your network/compute resources.

Most of them can scan compressed archive files, again - it's up to the vendor to dictate how deep (cascaded files).

Encrypted archives are non-scanable and you can usually filter them out within the vendor product settings (Some encrypted content is sometimes allowed, password-protected docs, encrypted content in signed EXE files, etc...).

It's important to remember that all that ONTAP do is to put the files in administrative share and call the VSCAN agent to tell the AV product to come and scan it, and then it passes back a true/false response for ONTAP do deny or allow the write/read.

[Mjizzini · Accepted solution]

It is possible to scan all files. Specifying the max size depend on your workload and the quantity of large files.

By default we recommends having 2GB.

[-max-file-size {<integer>[KB|MB|GB|TB|PB]}] - Max File Size Allowed for Scanning This parameter specifies the maximum size of the file which will be considered for virus scanning. By default, it is 2GB.