Antivirus file screening for Isilon

[scott]

I'm going to start serving files to a number of Windows machines using the Isilon NL server I administer.  I've been asked to set up ICAP antivirus processing and started with a pair of Linux servers running Symantec's ICAP solution, but their app keeps crashing, and two weeks of support have left me thinking its not really ready for prime time.

Can anyone recommend a solid virus scanning solution that works well with Isilon?   Looks like there are a few different projects based on clam...

Thanks

[alasajed]

Scott

Anything ICAP should work, however you can check this out to make sure its supported:
http://www.isilon.com/file-handler-show//1513/library-compatibility-guide-emc-isilon-third-party-software.pdf

[sharmelin]

Hi there,

Did you ever get this to work? I am also looking for ANY solution for File Screening on Isilon.
Thanks,
Shai

[scott]

Yes.  Using a pair of boxes running Linux + Symantec's ICAP solution.  Easy to set up on the Isilon side.  Some problems with support and documentation on the Symantec side.  If there is something better I would be interested..  

[Jason Davis]

Not using ICAP yet but we're thinking of implementing an Open Source based solution for AV and file extension blocking. 

Speaking of... is anyone using ICAP as a way to block file extensions from their Isilon clusters? Ala block evil .PSTs from user shares?

On Thu, Nov 29, 2012 at 10:03 AM, scott <huntm...@gmail.com> wrote:

Yes.  Using a pair of boxes running Linux + Symantec's ICAP solution.  Easy to set up on the Isilon side.  Some problems with support and documentation on the Symantec side.  If there is something better I would be interested..  

--
 
 

[Jerry Uanino]

Is there an ICAP solution for clamav or any other free antivirus resource?

On my "intern project list" I've had looking at ICAP with some free antivirus as an idea.

Clearly this would add value to the product too since it would be supported by the customer and only the ICAP piece would be under real support from isilon (which has to be supported for symantec anyway).

Is there a specific doc for ICAP support, kinda curious how it is setup on the isilon side anyway.

--
 
 

[Brendan Scherer]

Not sure if this is what you are looking for, but I found this: http://squidclamav.darold.net/installv6.html

Currently, ClamAV ICAP it isn't supported by Isilon. No idea if there are plans to make it so or not.

[Prashant]

I just implemented a solution for a customer with Symantec SAVSE running on Windows.  Fairly straight forward.  It isn't quite mature though.  It blocks zip and some other extensions.  I guess if it can't scan an archive or encrypted file, it deems it unsafe and quarantines it.

[Shai]

Hi there,

Thanks for the info. Can you specify any file name extension you want to quarantine or only .zip files?

Thanks

Shai

Sent from my iPhone

--
 
 

[Prashant]

Well it's supposed to quarantine only infected files. What I meant was that it falsely identifies certain file types as possibly infected.

You can set up an exclusion list in Isilon to not scan any falsely identified files and that's a workaround.