How Shared Insight Cache works

Article:HOWTO55318  |  Created: 2011-06-29  |  Updated: 2011-12-16  |  Article URL http://www.symantec.com/docs/HOWTO55318
Article Type
How To


Subject


How Shared Insight Cache works

After the client scans a file for viruses and spyware, the client submits the scan results to Shared Insight Cache. The scan results are submitted in the form of a vote. The client submits votes for clean files only.

When Shared Insight Cache receives the vote, if the client does not have the most current virus definitions, the server ignores the vote. If newer definitions are available, the newer definitions become the latest known definitions according to Shared Insight Cache and sets the vote count to one.

When the client subsequently makes a request to Shared Insight Cache to determine if the client should scan a file, the client submits the request. Clients can submit multiple cache requests and multiple update requests in bulk. Shared Insight Cache determines if the file received greater than or equal to the vote count threshold. If so, Shared Insight Cache returns the result of clean, which means that the client does not need to scan the file for viruses.

To keep the cache size manageable, Shared Insight Cache uses a pruning algorithm. This algorithm ensures that the cache size does not exceed the memory usage threshold. The cache pruning algorithm removes the oldest cache entries first. The oldest entries are the entries with the oldest timestamp.

Warning:

Symantec recommends that you maintain the default prune size value in the configuration file.

See About the Symantec Endpoint Protection Shared Insight Cache tool

See Customizing Shared Insight Cache settings


Legacy ID



v49770729_v59371754


Article URL http://www.symantec.com/docs/HOWTO55318


Terms of use for this information are found in Legal Notices