Critical System Protection

Hello all,

In terms of the Symantec Scan engine for NAS, I would like to know that if 'files are passed to the scanner from the filer', how does this not impact the network. I imagine a filer with quite alot of files would obviously decrease bandwidth if it need to be copied to the engine>scanned>then copied back to filer. Unless I am wrong in the mechanism, can someone please enlighten me on how this works?

I have read the documentation, and I do understand that files are cached to prevent redundant scan operations but at the same time, if a file is large I can only suspect that this would have performance impact for the end user when accessing the files, since the file will most likely be locked as well for scanning.

TIA

Scan Engine acts as a verdict engine which scans a copy of the file and reports its findings i.e. it's verdict to the connector e.g. clean, virus, cleaned etc. The only case where a file is transferred from the SE to the NAS is when an infected file has been cleaned so the NAS can then replace the file and release to the end user.