In the messages log of a NetApp Filer with vscan registered to Symantec Scan Engine, an error similar to the following appears:
"CIFS: Vscan server <> completed a scan request for ONTAP_ADMIN$\<
\ but the original request was not found. "
Errors similar to the following may also appear in the messages log of the NetApp Filer:
CIFS: Virus scan server \\<<HOSTNAME>> (<<IP>>) has disconnected from the filer
CIFS: Vscan abort_timeout exceeded while scanning ONTAP_ADMIN\<<PATH>>\FILENAME
There are multiple causes for this symptom: 1. Symantec Scan Engine de-registered from the NetApp Filer unexpectedly. 2. Symantec Scan Engine took longer to scan than the NetApp Filer abort_timeout value is currently configured to permit.
If the error "CIFS: Virus scan server \\<<HOSTNAME>> (<<IP>>) has disconnected from the filer" appears in the NetApp Filer logs, upgrade Scan Engine to version 5.2.4. If the error "abort_timeout exceeded" appears in the NetApp Filer logs, examine the Scan Engine logs to determine how long the scan took, then increase the abort_timeout within the CLI of the NetApp Filer.
To determine how long Scan Engine took to scan the file
Examine the "abort_timeout exceeded" error within the messages log of the NetApp Filer to determine the filename.
At the Windows cmd prompt, use the find command to locate the entries containing the filename.
At the Linux or Solaris shell prompt, use the grep command to locate the entries containing the filename.
For each matching entry within the Scan Engine logs, note the "|18|0.000|" pair. The second number is how many seconds Scan Engine took to scan the file.