Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Security and Encryption Guide
  3. Section IV. Malware scanning
  4. Instant Access configurations
  5. Configuration for scan instances
NetBackup™ Security and Encryption Guide

Configuration for scan instances

The traditional malware scan using Instant Access is based on vpfsd instance. NetBackup 10.3 and later uses a separate vpfsd instance for malware scanning which is configurable. This configuration is done using the numOfScanInstance parameter. By default, malware scan uses one instance. In most cases, scan instance is adequate but increasing the number of scan instances improves scan performance, although it also requires more CPU and memory. You can increase the number of scan instances from 1 to 4 and distribute the malware scan shares cross all the scan instances.

To change the number of scan instances

  1. Stop NetBackup on the media server using the following command:

    systemctl stop netbackup

    Or

    /usr/openv/netbackup/bin/goodies/netbackup stop

  2. Modify the number of scan instances as follows:

    Change the value of numOfScanInstance parameter in the vpfsd_config.json file. The value must be an integer between 1 and 4.

    For example:

    # grep numOfInstance /msdp/vol1/etc/puredisk/vpfsd_config.json

    BYO (build-your-own): <storage path>/etc/puredisk/vpfsd_config.json

    NetBackup Appliance and NetBackup Flex Scale: /msdp/data/dp1/pdvol/etc/puredisk/vpfsd_config.json

    NetBackup Flex: /mnt/msdp/vol0/etc/puredisk/vpfsd_config.json

  3. Modify the number of vpfsd instances (numOfInstance), the value must be an integer between 2 and 16. Ensure that the value of numOfInstance is greater than numOfScanInstance.
  4. Start NetBackup on the media server using the following command:

    systemctl start netbackup

    Or

    /usr/openv/netbackup/bin/goodies/netbackup start

Note:

Malware scan instances are part of vpfsd instances, which are reserved only for malware scanning.

Feedback

Was this page helpful?
Previous

Instant Access tuning parameters for malware scanning (BYO)

Next

Malware tools configurations

Feedback

Was this page helpful?