Product guide

Component Requirements
ePolicy Orchestrator McAfee ePolicy Orchestrator 4.5.7–5.0.x.
McAfee Agent McAfee Agent 4.6 patch 3 and later.
Recommendations for scanner count
Consider these recommendations for your test environment, then determine the requirements for your
production environment based on actual loads.
Physical scanner for NetApp filers
The best practice for scanner count for physical scanner is:
No. of physical scanners required = 2 X [Number of physical filers].
For example, if there are two physical filers, you need four physical scanners.
Virtual scanner with physical Network Interface Control (NIC)
If a virtual scanner replaces a physical scanner and it has a dedicated physical NIC in the hypervisor,
consider 1.5 X the number of physical scanner.
For example, for two physical filers, you can plan up to 6 virtual scanners with dedicated physical NICs
in the hypervisor.
Virtual scanner with virtual NIC
If a virtual scanner replaces a physical scanner and it has a virtual NIC in the hypervisor, consider 2 X
the number of physical scanners.
For example, if there are two physical filers, you can plan up to 8 virtual scanners with virtual NICs.
User authentication
For user account authentication for NetApp 7-Mode filers, see McAfee KnowledgeBase article KB67490.
Recommendations for ICAP scanner
Consider these recommendations for ICAP scanner configuration.
ICAP protocol does not require user account authentication. Make sure that the bind address is a
corporate-wide routed IP address. After installing McAfee VirusScan Enterprise for Storage, it should
not remain set to the default loop-back address 127.0.0.1. Otherwise, it might cause connection
issues periodically.
McAfee recommends that you always use a corporate-wide internally routed IP address of the
scanner's network adapter for the bind address.
Leaving the Accept scan requests from these ICAP clients field blank allows connections from any filer IP
address, which is recommended for testing and troubleshooting. If an exclusive list needs to be
established, you can configure it after the service request is completed.
If number of scan threads = 20 X [Number of connecting ICAP IP addresses], make sure that the
number of scan threads configured in that particular scanner's McAfee VirusScan Enterprise for
Storage ICAP settings matches that aggregate maximum potential number. You can determine the
aggregate maximum number of outgoing scan requests for all ICAP filers that are registered with a
particular scanner.
2
Installation and deployment
System requirements
12
McAfee VirusScan Enterprise for Storage 1.1.0 Product Guide