How many filers do you have?
One filer, Jose.
I'll suggest to increase AV scan threads value under Performance tab. As default value is 100.
Sorry, but I must have given the wrong impression. It's only using 1 or 2 threads. They are set to the 100 thread default.
I've opened a ticket with McAfee. If they help me resolve this problem, I will post the solution here.
Thanks for your help.
tselliott, did you get a resolution on that one? sounds like an interesting challenge and I wouldn't mind checking my systems to make sure they perform as best they can.
No, we have not found an answer to this problem yet. It's been very frustrating due to the amount of time, money, and work involved with these products. We've also had Dell/Compellent support assisting us. Part of the problem is the lack of information. I've been unable to get either Dell or McAfee to provide any sort of performance metrics that we should be able to achieve. This is high end storage on 10gbps networks utilizing scanning servers that exceed all of McAfee's requirements.
Currently, we're waiting for someone from McAfee's tier 3 support to contact us. Dell has said that they were in the process of obtaining the Symantec equivalent software for test/comparison purposes.
The problem appears to be the "access time" as reported by McAfee's ICAP statistics. Regardless of the file size (below 1MB anyway) the average scan time is below 10ms per file but the average "access time" runs 400-600ms. Half a second per file really adds up when you're copying thousands of files. Example: 10000 files only totaling 50-100MB in size will take 80-90 minutes to copy. That's unacceptable.
If there's anything else you would like to know, please feel free to contact me. I'd also like to hear any information you can provide.
Any update on this? We are trying to bring an Isilon Cluster to production and I am very concerned about the ICAP servers being a bottleneck. There is almost no documentation in reference to Isilon it's mostly Oracle and NetApp.