You can use ENSSP 2.x to scan for malware on NAS devices by mapping a drive and using on-demand scan (ODS). There's no specific requirement for infrastructure. You can use existing Windows servers installed with ENSSP to scan files that reside on the NetApp Storage.

ODS scans Common Internet File System (CIFS) file access for threats. CIFS volumes are mounted as a network drive on a Windows Server where ENSSP does the ODS.

NOTE: ENSSP-installed system resources such as CPU or memory are used to scan the files that reside on the NetApp Storage.

On an ENSSP-Installed Windows Server, perform the following steps:

1. Map a network drive from the NetApp storage controller to this Windows Server.
   
   NOTE: The logged-in user requires Change permission to be set on the file share. To change the permissions, go to the NetApp controller and set the Change permission for the user who uses the AV Server.
    
2. Create an ODS task in the ePO console with any of the following options, and provide a valid mapped drive:

• Drive or Folders
• All mapped network drives​

3. Configure the actions in the ODS task to clean, delete, or continue scanning when a threat is found.
4. Enforce the task to this ENSSP\Windows Server client.

The ODS scan runs on the client according to the schedule configured on the ePO server.