Hello!  In order to use policy scans from OneFS (i.e. running the AVScan job) you need all nodes to be able to access the ICAP server. the jobengine uses all available nodes to run. This behavior has been consistent from OneFS 6.5 and newer.  If you run on-access scanning (i.e. scan-on-open or scan-on-close) you may have a cluster with nodes that cannot access the ICAP server and it'll run just fine. Let me know if this helps!
Hello after upgrading to onefs 8.0 it seems that isilon want to use the backup accelerator node to send file to the icap server...  I don't understand why isilon want to use the backup accelerator node now... In version 7 we doesn't have this  regards
icap backup accelerator node