Need to get results for ODS scan on NETAPP server

[alokmhatle]

We have VSE for storage 1.3 installed on our windows server

This VSE for storage server remotely performs On access scan on files accessed by users

on vfiler storage server. There is no on demand scan run from VSE for storage

However we do have On Demand Scan vScan run by the vFiler locally on the NETApp server.

This NETAPP server is not managed by ePO

We need to know if it is possible to get the ODS scan logs from the On Demand Scan

performed on the NETAPP server using the local vScan feature

Also we have observed huge volume of NETAPP scan failed status on a lot of files on the

NETAPP server. Co-incidentally at the same time, VSE for storage service was stopped on

VSE for storage server. Can the stoppage of the VSE for storage service on the windows

server cause any failures on the ON Demand Scan vscan run locally on the NETAPP

server

[LKS]

Hi alokmhatle,

**Disclaimer**

Am really not an expert on VSE for storage product. However i would like to share what i found here.

Yes you can configure log location on VSE i think.

1. Log on to the system as an administrator.
2 On the Windows taskbar, right-click the McAfee menu let , then select VirusScan Console.
3 On the VirusScan Console, double-click Network Appliance Filer AV Scanner.
4 On the Reports tab, define these options: 

* Enable activity login and accept the default location for the log file or specify a new location - Enable the log activity and deȴne the log ȴle location as required.

* Limit the size of log file — Enable log ȴle size limitation, then type a value in Maximum log file size (MB).

* From the Log file format drop-down list, select an appropriate format.

5. Click OK to save the configuration.

To answer your second question, yes if the services stopped then On-demand scan may be terminated/stopped.

Was my reply helpful?

If you find this post useful, please give it a Kudos! Also, please don't forget to select "Accept as a Solution" if this reply resolves your query!

[alokmhatle]

Thanks a lot for your response

The steps you mentioned above for the logs settings is for the logs related to on access scan performed by VSE for storage on the Filer

The NETAPP server has its own On demand weekly scan run on the Filer server and need to know if the results of that NETAPP vscan on the NETAPP Filer can be sent to the ePO or not ??

[alokmhatle]

team,

Any help or information for the queries further 

[alokmhatle]

Diverting the question little bit

Just wanted to know how we can initiate an On Demand Scan on the Remote Filer Server using the VSE for storage server

Is there any feature in VSE for storage to initiate the On Demand scan 

If not, can we use the VirusScan Enterprise installed on the VSE for storage server to scan the remote drives of Filer server

Will this have any performance issues on the VSE for storage server

[alokmhatle]

Team,

Since I am not receiving any response to the queries, I am just putting forth some work around queries 

If configuring a remote ODS scan from VSE for storage server to the filer can lead to resource utilisaiton on VSE for storage server, can we think about installing ENS for linux on our Filer server itself 

Now this filer server has huge data in TBs. So is it a good practise to have ENS for Linux installed on Filer servers 

[d33pakrao]

What is the filer make and model?

The filer may be using ICAP/RPC to send the scan to the scan servers which is to a Server installed with VSE 88 and VSE Storage (1.3)

Supported platforms, environments, and operating systems for VirusScan Enterprise for Storage

https://kc.mcafee.com/corporate/index?page=content&id=KB74863

https://kc.mcafee.com/corporate/index?page=content&id=KB81982

[d33pakrao]

Hi Alok,

How to use the VSE On-Demand Scanner to scan items on a filer that are unfit for VSES on-access scanning
Technical Articles ID: KB81751

You can use VSE 8.x to scan for malware on NAS devices by mapping a drive and using On-Demand Scan (ODS). It does not have any specific requirement for infrastructure and allows you to use existing Windows servers installed with VSE to scan the files residing on the clustered Data ONTAP.

Was my reply helpful?
If you find the content of this post useful, please give it a Kudos!
Please don't forget to select "Accept as a Solution" if this reply resolves your query!
Happy to Help with Gratitude -
d33pakrao

[d33pakrao]

VSE is the only which support VSES Storage, 

Yes, there will be performance issues when you are doing an OnDemand Scan from the same server which is also processing requests from the clients.

It is better to check the Stats_Netapp.log to check the actual load against the used threads.

https://kc.mcafee.com/corporate/index?page=content&id=KB78672

Was my reply helpful?
If you find the content of this post useful, please give it a Kudos!
Please don't forget to select "Accept as a Solution" if this reply resolves your query!
Happy to Help with Gratitude -
d33pakrao

[alokmhatle]

Hi Deepak,

thanks a lot for the experts comments as usual...

VSe for storage is a remote scanning feature for scanning files on the Filer 

our customer wanted to avoid this remote scanning feature and hence install ENS for Linux on the Linux Filer server itself.. so that they can avoid VSE for storage usage 

hence wanted to know if it is recommended to install ENS for linux on huge size Linux Filer servers locally which already have data in TBs size