Search <book_title>...

NetBackup™ Troubleshooting Guide

Last Published: 2023-03-31

Product(s): NetBackup (10.2)

Issues with malware scanning

Table: Issues related to malware scanning

Error/Issue	Description	Workaround
Failed to connect to the scan host.	SSH connection to scan host from media server failed.	Verify the following scan host credentials: RSA (SHA256) key User name Password Refer to NetBackup™ Web UI Administrator's Guide for the scan host configuration.
Failed to determine the scan host OS.	Error can be due to unsupported scan host.	For a complete list of supported platforms for the scan host, refer to the Software Compatibility list document.
Failed to copy NetBackup malware utility to the scan host.	Not enough space is available on the scan host. SSH user does not have access to the required directories on the scan host.	On windows scan host, check for space availability in `C:\` folder. On Linux scan host, check for space availability in `/tmp` folder.
Failed to get the scan host credentials.	Media server is not able to fetch the credentials to access scan host from the Primary.	Check that credentials for scan host are specified.
Time-out has occurred during the scan.	Default scan operation time out is two days. Time to scan may vary depending on the factors sch as workload type, network bandwidth, backup size.	Scan time-out is configurable and can be changed by setting the MALWARE_SCAN_OPERATION_TIMEOUT configuration key. Minimum value: 1 hour Maximum value: 30 days
Failed to get response from NetBackup malware utility.	Mismatch between `nbmalwareutil` binary and the `ScanManager`	Contact NetBackup support.
Failed to launch the scanner.	Malware scanner-specific failure message.	Refer to `nbmalwarescanner` logs on the media server.
Failed to mount the backup image.	IA share is not accessible from the scan host.	Check IA configuration on storage server. Verify on activity monitor that IA job is successful.
Failed to unmount the backup image.	IA share is busy or not accessible.	Refer to `nbmalwarescanner` logs on the media server.
Failed to run a scan.	Generic failure during the scan of a backup image.	Refer to `nbmalwarescanner` logs on the media server.
Failed to an open file. Unable to create a directory. Failed to generate the result file. Failed to open output file. Unable to create directory for result file. Failed to open the result file. Unable to create mount destination directory. Unable to create directory for a log file.	Not enough space is available on the scan host. SSH user does not have access to the required directories on the scan host.	On windows scan host, check space is availability in `C:\` On Linux scan host check space is availability in `/tmp`
All mount drives are exhausted.	Only five backup images can be mounted at the same time on windows scan host.	Ensure that scan host is not part of multiple NetBackup domains. Check if there are any Stale mounts on the Scan host by running net use. Following drive letters are used for mounting the IA shares on the windows scan host. Ensure that they are not in use.`L:\ M:\ N:\ O:\ P:\`
Either the Windows Defender is not installed or the environment variable is not set.	Microsoft Windows Defender is not installed on the scan host or not configured properly.	Ensure that Microsoft Windows Defender is installed on scan host. Refer NetBackup™ Web UI Administrator's Guide for the scan host configuration.
Either Symantec protection engine is not installed or the environment variable is not set.	Symantec Protection Engine is not installed on the scan host or not configured properly.	Ensure that Symantec Protection Engine is installed on scan host. Refer NetBackup™ Web UI Administrator's Guide for the scan host configuration.
Failed to perform malware scan of the backup image.	Generic error for Scan failure.	Contact NetBackup support.
Net bios name can be at most 15 chars long.	Storage server hostname cannot be more than 15 characters for the SMB share support. If Windows Server 2016 is used to set up Active Directory domain, then it does not allow to connect to a storage server with hostname of length more than 15 characters.	Ensure the character limit.
Failed to run a scan.	Generic failure during scanning backup image.	Check for the following errors: Refer to `nbmalwarescanner` logs on the media server. Check for space on media server storage. Check for NFS service failure on media server.
Too many infected files in the selected time range.	Review the `nbmalwarescanner` to view the infected files list for the backup images in the selected date range.	Update the date range or recovery files and folders selection to reduce the number of infected files. Retry the operation. You can also perform one of the following: Select the Allow recovery of files impacted by malware option which can be used to recover selective clean files. Skip that backup image from recovery.
Large number of infected files.	There are too many infected files in the selected scan result. If the scan result has infected files greater than 5000, the following message is displayed: Large number of infected files. To view the complete list of infected files, export the list.	Export the infected file list in `.csv` format and download it to view it.
Large number of infected files.	There are many infected files in the selected scan result or the infected file paths are long to be captured in the database. Following error message is displayed: Large number of infected files. This result cannot be exported or viewed.	As the results cannot be exported or viewed, review the scan logs to view a detailed list of the infected files for the selected scan result.
Scan operation is divided into parts.	For large size backup, scan operation is divided into parts. For example, if total number of files in the backup are 1,000,000, the scan operation will be divided into two parts of 500,000 files each. Each part would be created and scanned separately. Each part can be assigned with different scan host. The Malware detection UI displays only single entry for backup.	Each divided part details can be obtained by using the REST API.

Issue related to NAS-Data-Protection

When upgrading NetBackup from previous version to NetBackup version 10.2 with the following options selected, the No images match the search criteria message is displayed:

Options	Fields
Search by: Backup images	Policy type: NAS-Data-Protection Copies: Copy2 Malware scan status: Not scanned (Default)
Search by: Assets by policy type	Policy type: NAS-Data-Protection Copies: Copy2 Scanner host pool: Select the required scanner host pool. Malware scan status: Not scanned (Default)

Options

Fields

Search by: Backup images

Policy type: NAS-Data-Protection

Copies: Copy2

Malware scan status: Not scanned (Default)

Search by: Assets by policy type

Policy type: NAS-Data-Protection

Copies: Copy2

Scanner host pool: Select the required scanner host pool.

Malware scan status: Not scanned (Default)

Workaround:

To view the images that are backed up, ensure that you select the Malware scan status option as All to scan the NAS-Data-Protection backup images created on earlier version of NetBackup media server.