CIFS Share Inaccessible Due to Vscan Connectivity Issues
Applies to
- NetApp ONTAP 9.7P18 and 9.7P23 (mixed-version cluster)
- FAS8300
- CIFS/SMB protocol
- Vscan/Antivirus integration (TrendMicro)
- SVMs with Vscan enabled
- All ONTAP systems running an unsupported or end-of-support release
Issue
Users are unable to access files on a CIFS share. The following symptoms and log outputs were observed:
- End users receive:
Device attached to the system is not functioning - EMS logs on node (AWSMERNAFAS08) repeatedly show:
[nblade2:Nblade.vscanNoScannerConn:EMERGENCY]: Vserver "SVM1" has no virus scanner connection. [nblade2:ems.engine.suppressed:debug]: Event 'Nblade.vscanNoScannerConn' suppressed 113 times in last 610 seconds.
- Antivirus connector tests return:
REST API call using account failed. The remote server returned an error: (401) Unauthorized - ONTAP Apache error logs show:
authentication failure for "/api/network/ip/interfaces": PasswordMismatch
for user accounts used by AV connectors. - All 8 AV connectors are affected, running TrendMicro version 1.0.6.0 (vendor recommends 1.0.7P1).
- Cluster is running ONTAP 9.7P18 and 9.7P23 (unsupported).
- Disabling Vscan on the impacted SVM restores file access.
