PowerScale OneFS Web Administration Guide

Antivirus overview

You can scan the files that you store on a PowerScale cluster for viruses, malware, and other security threats by integrating with third-party scanning services through the Internet Content Adaptation Protocol (ICAP) or the Common AntiVirus Agent (CAVA).

OneFS sends files through ICAP or CAVA to a server running third-party antivirus scanning software. These servers are called ICAP servers or CAVA servers. These servers scan files for viruses.

After a server scans a file, it notifies OneFS of whether the file is a threat. If a threat is detected, OneFSnotifies system administrators by creating an event, displaying near real-time summary information, and documenting the threat in an antivirus scan report. You can configure OneFS to request that ICAP or CAVA servers attempt to repair infected files. You can also configure OneFS to protect users against potentially dangerous files by truncating or quarantining infected files.

Before OneFS sends a file for scanning, it ensures that the scan is not redundant. If a scanned file has not been modified since the last scan, the file will not be scanned again unless the virus database on the antivirus server has been updated since the last scan.