"Nblade.vscanVirusDetected" errors in ONTAP logs for files that are not infected
Applies to
- ONTAP 9
- ONTAP AV Connector 1.0.4
- Sophos Anti-Virus for NetApp Storage Systems 3.0.0.1
Issue
- Volume latency is continuously high
- Sophos anti-virus may trigger "Nblade.vscanVirusDetected: Possible virus detected." errors in ONTAP for files that have not been scanned for viruses.
[?] Mon May 18 07:21:47 +0200 [cluster1-01: kernel: Nblade.vscanVirusDetected:error]:
Possible virus detected. Vserver: svm1, vscan server IP: 10.20.30.1, file path: \vol\vol1\file1.txt,
client IP: 10.20.30.2, SID: <SID>,
vscan engine status: 222200001, vscan engine result string: Code 222200001, file is infected.
- A network trace will show if the file was succesfully scanned by the Sophos Anti-Virus