Product Architecture in Cluster-Mode

Views:

Cluster-Mode Device (also known as C-Mode Device) is the machine where Data ONTAP Cluster-Mode is installed. Cluster-Mode AV Connector (called by NetApp as Clustered Data ONTAP Antivirus Connector) is an agent program provided by NetApp and installed together with the Normal Server to manage the Cluster-Mode Device.

ServerProtect for NetApp product architecture in Cluster-Mode

In Cluster-Mode, When a user tries to access a file or store a new file in a NetApp Cluster-Mode Device, the Cluster-Mode Device performs a virus check. If the filename extension matches the file scanning criteria (for example, an ".EXE" or a ".VBS" file), the Cluster-Mode Device sends a scan notification to the Cluster-Mode AV Connector. The Cluster-Mode AV Connector sends a scan request (Scan Now) to the Scan Server(s). The Scan Server passes back the scan result to the Cluster-Mode AV Connector, and the Cluster-Mode AV Connector sends it to the Cluster-Mode Device. According to the scan result, the user is either allowed to open, save, or is denied to access the file.

To learn more about setting your NetApp Device file scanning criteria and Cluster-Mode, refer to your NetApp Device documentation.

Note

Since only specific file types contain viruses, establishing the right file scanning criteria can help optimize Scan Server performance, reduce bandwidth usage, and minimize scanning time. To learn how ServerProtect for NetApp can efficiently and safely scan files, see IntelliScan.

If a file contains a virus, ServerProtect for NetApp performs a designated action. Refer to Scanning Viruses for additional information about scan actions. For example, if the file is cleanable andServerProtect for NetApp is configured to perform a Clean action, the following will occur:

The Scan Server cleans the file and informs the NetApp Device that the file is no longer infected.
The NetApp Device allows its client to access the cleaned file and replaces the original file with the cleaned one.

Note

The NetApp Device "trusts" registered Scan Servers. Therefore, if a Scan Server also functions as a Normal Server (as a file or data server) and happens to send a file to the NetApp Device, it will not request the file to be scanned. To protect both the NetApp Device and the Normal Server, set the ServerProtect Real-time Scan to "Incoming & outgoing." See Using Real-Time Scan to set Real-time Scan to "Incoming & outgoing."