Hi Daniepsal,

This error message was caused by Virus Checking server is unable to connect to the Data Mover with the CAVA user. You mentioned the box was moved to a new location, have you reconfigure Virus server for Celerra? If you have reconfigured the virus server, follow these steps to start the CAVA service with CAVA user:

1. Stop the VC client on the Data Mover using the following command:

$ server_setup server_2 -P viruschk -o stop

2.  Log in to CAVA server. From the taskbar, click Start, and select Settings > Control Panel > Administrative Tools > Services

3. Scroll to EMC CAVA.

4. Right-click EMC CAVA and click Stop.

5. Right-click EMC CAVA and click Properties.

6. Select This account from Log on tab and type the CAVA Username and Password and select OK.

7. Right-click EMC CAVA and click Start.

8. Start the VC client on the Data Mover using the following command:

$ server_setup server_2 -P viruschk -o start

9. Display the virus checker using this command:

$ server_viruschk server_2

10. You should able to see the message ONLINE next to your CAVA server IP address.

After you complete these steps, you can refer to primus emc273249 to delete older alerts from the Unisphere interface.

Hi Jeffrey,

We have not reconfigured anything yet and I don't know how to do it. It has been a while. Can you also please post the steps on how to do the reconfiguration ? The only thing that got changed is the IP Address. Thank you very much for your help.

Regards,

Daniel

i also would appreciate it if you can tell me what the impact is with this issue? thanks for your help.

Hi Jeffrey,

can you please help me further ? the symptom still exists. Thank you.

Hi danielpsal,

The specific steps depend on your environment.

If your VNX and AV server have been relocated to a new domain, you should configure a new domain user account to the AV user, and then change the AV server IP addresses in viruschecker.conf.

If your VNX and AV server are still in the original domain, you can use the existing domain account, but you still need to change the AV server IP addresses in viruschecker.conf.

For more information, you can refer to the document of Using Celerra AntiVirus Agent or the video Common Anti-Virus Agent (CAVA).  

Hi danielpsal,

There are two actions we will take when all the CAVA servers are not marked as online. You can see the following screenshot, it is the shutdown option. This will shutdown CAVA so that files don't continue to be queued and hit a high watermark. The other options is to do nothing. You can use the command of server_viruschk to check your setting.

Honestly, I have very little or close to zero experience dealing with CAVA on the Celerra. I started knowing Block and File with VNX. Although, the same commands, I can easily navigate thru Unisphere than the Celerra Manager dealing with his specific issue. Thanks for your patience and help. We don't have support anymore for this Celerra in question so we are doing our best effort.

Thanks Jeffrey. I guess that message does not go away until all the cava servers are all marked online? The only thing that got changed as far our infra goes, are the IP addresses for the Celerra but they are on the same subnet and VLANs as the CAVA server. My boss is panicking that Virus checker is not working/scanning the files going in to the Celerra.

Hi danielpsal,

I think you are right, the warning messages will not pop up until at least one CAVA works fine, you can also stop the CAVA services to stop the warning information.

I suggest you can watch the video that i recommended to you, it demonstrates step by step how to configure the CAVA in VNX. If you feel my answer is helpful, please help to mark it. Thanks.

Hi Danielpsal,

How are things going? Do you have resolve your problem? Looking forward to hearing from you.