SPE 8.1 does not honor the temp scanning folder setting for Stargate

Products

• Protection Engine for Cloud Services
• Protection Engine for NAS

Issue/Introduction

The ICAP Connector sending files larger than available space on / partition to Symantec Protection Engine (SPE), shows "RESOURCE_UNAVAILABLE" as a response from SPE.

The SPE logs contain an entry similar to the following: 

1604629443|11|2|1|30|Resource unavailable|43|10.78.55.3|44|1344|45|36270|120|1604624349136|121|cl-avscanning.example.com

 

During the scan, the bash command "watch df -h" may show the USED% column grows for the / partition rather than a partition specific to the SPE temp scanning folder.

 

Environment

Setup:

• Connector is on Windows 2019 sending files via Java API using the streaming option.
• SPE server - RH Linux 7.7 with SPE 8.1

Cause

SPE 8.1 does not honor the temp scanning folder setting for Stargate

Resolution

Please upgrade to SPE 8.2 where this issue is resolved. 

 

If not able to upgrade immediately, workaround as follows:

1. If temp scanning folder should be on a  non-/ partition, edit fstab to mount /opt/SYMCScan/bin/definitions/Stargate/temp/ to a device different than the one for /, then reboot to make the change effective
2. Set the SPE temp scanning folder to /opt/SYMCScan/bin/definitions/Stargate/temp/