About Network Scanning Options in Symantec AntiVirus 10.1 and Symantec Client Security 3.1

Article:TECH101730  |  Created: 2006-01-08  |  Updated: 2009-01-10  |  Article URL http://www.symantec.com/docs/TECH101730
Article Type
Technical Solution


Environment

Issue



You need to know about the new Network Scanning Options in Symantec AntiVirus 10.1 and Symantec Client Security 3.1.


Solution



Uncheck Enable scanning to stop Auto-Protect from scanning network drives. When scanning is enabled on network drives, Symantec Client Security scans files as they are written from a client computer to a server or from one server to another server. When network scanning is enabled, you can also enable Auto-Protect to trust remote versions of Auto-Protect and to use a network cache.

For protection, it may not be necessary to check the Enable Scanning option if you have enabled Auto-Protect on all of your servers. For example, if network scanning is enabled on client A and Auto-Protect is also enabled on server B, when client A writes a file to a network drive on server B, Symantec Client Security scans the file on client A and scans the file again on server B. Duplicate scanning is likely to reduce network performance on the client computer, however.

To keep Auto-Protect from performing duplicate scanning while network scanning is enabled, you can check Trust files on remote computers running Auto-Protect. If this option is enabled on both the client and the server, the client Auto-Protect checks to see that the server's Auto-Protect settings provide at least as high a level of security as its own Auto-Protect settings. If this is so, the local computer trusts the Auto-Protect scan on the remote computer and does not rescan the file. For example, when client A writes a file to a network drive on server B, Symantec Client Security scans the file on client A but does not repeat the scan on server B. Trust files on remote computers running Auto-Protect is enabled by default when network scanning is enabled.

Uncheck Trust files on remote computers running Auto-Protect if you want to disable the trust feature and allow duplicate scanning. Unchecking this option is likely to reduce network performance.

Check Network cache on a client computer so that Auto-Protect stores a record of the files it has already scanned from a network server. This option prevents Auto-Protect from scanning the same file more than once and may improve system performance. You can set the number of files (entries) that Auto-Protect scans and remembers; you can also set the timeout before the files are removed from the cache. Once the timeout expires, the files are removed from the cache and network files are scanned again if the client requests them from the network server.

To configure Network Scanning Options in Symantec System Center
  1. Start Symantec System Center.
  2. Unlock the server group that you need to configure.
  3. Do one of the following:
    • Right-click the server group or the Symantec Client Security servers that you want to configure, and then click All Tasks > Symantec AntiVirus > Server Auto-Protect Options.
      If you select a server group, the Symantec System Center configures all of the servers that are in the server group.
    • Right-click an individual server or multiple selected servers, and then click All Tasks > Symantec AntiVirus > Client Auto-Protect Options.
    • Right-click the server group or the servers that manage the Symantec Client Security clients that you want to configure, and then click All Tasks > Symantec AntiVirus > Client Auto-Protect Options.
      The Symantec System Center configures all of the clients that are associated with the server or the server group.
    • Right-click an individual client or multiple selected clients for a server, and then click All Tasks > Symantec AntiVirus > Client Auto-Protect Options.
  4. Under Network Scanning Options, do the following:
    • Check or uncheck Enable scanning.
    • Check or uncheck Trust files on remote computers running Auto-Protect.
    • Check or uncheck Network cache, and then type the setting that you want in the Entries box and in the Timeout (seconds) box.
  5. If you configure client Auto-Protect options, click the lock icon next to each Auto-Protect option that you want to lock to propagate the option to clients.
  6. If you configure Auto-Protect options for a server group, click Reset All to ensure that all of the computers use the Auto-Protect scanning configuration that you set at this level.
  7. Click OK.

To configure Network Scanning Options on the local computer
  1. Start Symantec AntiVirus.
  2. On the Configure menu, click File System Auto-Protect.
  3. Under Network Scanning Options, do the following:
    • Check or uncheck Enable scanning.
    • Check or uncheck Trust files on remote computers running Auto-Protect.
    • Check or uncheck Network cache, and then type the setting that you want in the Entries box and in the Timeout (seconds) box.
  4. Click OK.







Legacy ID



2006030817095748


Article URL http://www.symantec.com/docs/TECH101730


Terms of use for this information are found in Legal Notices