Home > Storage > PowerScale (Isilon) > Product Documentation > Storage (general) > Dell PowerScale: Common AntiVirus Agent Solution > Overview
Figure 5 shows the overall workflow of how CAVA works in OneFS. The anti-virus applications use the SMB protocol to fetch the file or a portion of a file for scanning in a PowerScale cluster. From the anti-virus perspective, the hidden SMB share CHECK$ must be present on the NAS in order to read the data to be scanned. This share allows access to all files on a PowerScale cluster under /ifs. SmartConnect and a dedicated access zone are introduced in this process to ensure that all the connections from the anti-virus application are fully distributed and load-balanced among all the configured nodes in the IP pool. A hidden role, AVVendor, is created by the CAVA anti-virus service to map the EMC CAVA service account into OneFS.
Figure 5 also shows the overall steps to configure CAVA in OneFS:
The following sections introduce these steps in detail.
The prerequisites to configure CAVA service in OneFS are listed in Table 5.
Prerequisites | Description |
SMB service
| The SMB service on OneFS should be enabled to ensure that anti-virus applications can fetch data from the PowerScale cluster for scanning. |
SmartConnect Service IP (SSIP) | SSIP should be configured in the OneFS subnet level. SmartConnect is used by the CAVA service to ensure that all the scanning requests are well balanced among all the nodes in the IP pool. |
Anti-virus application and Dell Comment Event Enabler (CEE) | See the document from the anti-virus software vendor and Using the Common Event Enabler on Windows Platforms. |
Active Directory access | CAVA service in OneFS requires that the anti-virus application and PowerScale cluster be in the same domain. |
Dedicated IP addresses | All the connections from anti-virus applications are served by a dedicated IP pool in PowerScale. These IP addresses are used to configure the IP ranges in this IP pool. We recommend using exclusive IP addresses which are only available to the anti-virus applications. |