Unsolved
This post is more than 5 years old
4 Posts
0
1811
FS8600 Antivirus
Hi all.
I have an SC8000/FS8600 setup and my security group wants to implement Trend Micro NAS scanning. I find the performance to be terrible as any new reads must send the file to the scanning server for processing. Additional scanning servers only seem to be used in a round-robin fashion rather than multiprocessing. ICAP will only scan new files or modified files and once a file has been scanned it will not be scanned again unless modified.
This affects user and backup performance.
I can't be the only one using NAS antivirus. How do others handle this?
Thanks.
DELL-Bob Mi
230 Posts
0
February 19th, 2018 17:00
Hello,
You can refer to the FluidFS Antivirus Integration document:
http://en.community.dell.com/techcenter/extras/m/white_papers/20439147
Page 10 section 1.2.2 Configuring antivirus scan on the Compellent FS8600 covers the setting for an FS8600. You can set certain files to not be scanned if you choose. Please open a case with the FS8600 team for further questions.
J.Fowler
1 Message
0
March 13th, 2018 11:00
Maybe not officially supported, but we found FluidFS seems to work with Sophos AV for Linux v9.x too. We didn't need the end-point protection suite, but an AV product that supported ICAP.
After configuring our Dell FS7610 to use AV, we found the FluidFS "client" sending the following to the AV server:
OPTIONS icap://FluidFS/avscan ICAP/1.0
Initially, it was failing on the Sophos AV server with "404 - Service not found". Dell support said everything looked good. Sophos support said their software was ok too, so we were stuck.
In the end, the Sophos config needed the "avscan" service defined. Once we updated that, it worked fine. These documents helped.
https://www.sophos.com/en-us/medialibrary/PDFs/install%20guides/SAVDIICAP_Test_Guide.pdf
https://datatracker.ietf.org/doc/rfc3507/?include_text=1
bushmonkey
5 Posts
0
May 2nd, 2019 10:00
Late reply, we have an FS8600 also setup with Trend Scanning using the InterScan Web Security appliances. Seems to work ok for small files like .doc and .xls etc but once you get into moving multiple files around it murders your performance.
I recently setup a "software" share for our desktop support group to store installers/ISOs etc. They tried to copy a 9GB folder from the NAS to a desktop workstation and it was showing 13 hours until complete. I let it burn for about an hour before I gave up. I then turned off the AV for that share and it copied in 5 minutes!
Unfortunately there doesn't seem to be many options out there. Too bad, because the FS8600 speeds are great, but the AV makes it seem like garbage :(