Skip to main content
NetApp Knowledge Base

Which ports are needed to run Vscan through a firewall?

  1. Last updated
  2. Save as PDF
Views:
3,048
Visibility:
Public
Votes:
1
Category:
ontap-9
Specialty:
nas
Last Updated:

Applies to

  • ONTAP 9
  • Vscan

Answer

  • ONTAP 9 uses two separate protocols for the purpose of Vscan:
    • HTTPS (TCP port 443) towards the management LIFs configured in the Antivirus Connector
    • SMB2 (TCP ports 139 and 445) towards the data LIFs discovered by the Antivirus Connector
  • In both cases, connections will be initiated by the external Vscan server

Additional Information

  • The source IP address used by the Vscan server to contact any data LIF should be one defined in the related scanner-pool
  • If a special network has been configured to separate Vscan traffic from user data traffic then is better to configure the firewall to allow the Vscan server to only reach the data LIFs designated for Vscan traffic
  • The ONTAP firewall must allow access to HTTPS in order for the Antivirus Connector service to connect

 

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.