vScan anti-virus app recommendation wanted

[final echo]

Hi, all.

We are running ONTAP version 9.9.1P7. We have been using Sophos, but that product is EOL.

We are trying to decide among the remaining vendors- McAfee, Trend Micro, and Symantec.

Has anyone had good/bad experiences with any of these? Does anyone have a recommendation for best option?

[frank wolf]

we are using trendmicro serverprotect 6. looks old but works 😉
don´t know the other vendors like mcaffee or symantec.

[sharp jewel]

we are using McAfee/Trellix and it also works but have some limitations in our huge environment

[oblique oracle]

I would deprecate your Vscan solution and focus on a good end-point protection plus a solution for ransomware-protection on ONTAP.

It's not worth the hustle anymore. I don't know of any customer we implemented vScan in the last years...
Recently a bigger customer deprecated his McAfee vScan because he's going MS Defender all the way plus SnapLock and ARP for ransomware-protection.

[gentle crater]

Hi we have a old ontap 7.3 with symantec and need to change AV with Trend there is a guide or documents to do this ?

[near lake]

I agree mostly. It depends on your data, but file size limits and how vscan is done on clustered is pretty unelegant

[near lake]

it won't sound very nice, but you have more serious issues if you are running 7.3 if you value your data

[safe steeple]

Hmmm yeah toughone, most of the documentation we have is only for 8.x 7mode or higher, not 7.x. Even AV software vendors may not confirm they actually work with such an old version of ONTAP (it may work, but they may not want to confirm that).

We have this 7mode Antivirus scanning best practices guide - https://www.netapp.com/media/16385-tr-3107.pdf but yeah it is more focused at ONTAP 8.x but principles / ideas would generally be the same.

[gentle crater]

thx for support , i have read document but is only for management not for upgrading/changing infrastructure, the commands on new ontap documents is different , if possible i would like change my symantec antivirus "old" with new Trend infrastructure , my problem is to have a guide for do this operation or have a command to do this upgrade . Is possible to change in configuration only a pointing of console from symantec to Trend or need to setup other component inside netap ? sry for question but no have idea for update its

[gentle crater]

yes is not simple and don' have support beacause is a old version , the customer don t have buyed new license for symantec beacause want to use Trend, and i search more information to do this operation

[near lake]

I think I made the same change about 14 years ago... from Symantec to Trend but I have no clue if Trend even supports such an old ONTap OS version anymore. We just pointed the configuration to the new servers because the API is the same. The point is, if the data is important, that hardware isn't going to live so much longer.

[gentle crater]

yes i know the hardware is very old , and there is a project from migrate it , but i think need 1 year for do the operation of migration to new system , you have a procedure to do this operation , beacause i don't have found a documentation for see configuration or for change it , if you have more informations for do it let me know thx

[near lake]

I would just see if you can find the old manpages... i think the commands are still just under 'vscan'