Symantec Endpoint Protection client is not able to scan the shared mirrored folders on the file server which are replicating with a remote server using WAFS Technology

Article:TECH199916  |  Created: 2012-11-20  |  Updated: 2012-11-20  |  Article URL http://www.symantec.com/docs/TECH199916
Article Type
Technical Solution


Issue



Symantec Endpoint Protection client is not able to scan the shared mirrored folders on the file server which are replicating with a remote server using WAFS Technology


Error



 No error displayed


Environment



Symantec Endpoint Protection version:-12.1 Ru1

Symantec Endpoint Protection Manager Server OS:- Server 2003 Enterprise Edition

Fileshare Server OS:-Server 2003 Enterprise Edition


Cause



Symantec Endpoint Protection is not able to scan the mirrored drives on the Fileshare Server (using WAFS Technology) and this is as per the Product Design.


Solution



Due to the replication of the shared folders using WAFS Technology the files seem to be present on the local server but these are mirrored due to WAFS and the original location is different and hence when we run a scan on these folder we get the output 0 files scanned.

Symantec Endpoint Protection is not able to scan the mirrored drives (using WAFS Technology) and this is as per the design of the product.

Hence the original location needs to be scanned by SEP instead of the mirrored folder to remove the infections.


Supplemental Materials

Description

 Detailed Description:-

 

*Environment consists of a file server and all the users run application by accesing the exe files located on the file server.These exe files are present in the shared drive and all the users have access to this drive.

*Every Application has a dedicated folder in the shared drive contain the exe files which initiate the application.Hence in case these exe files are infected when the user runs this exe file autoprotect automaticaly detects the file and cleans it.

 

*Autoprotect does not clean this file on the file server itself instead of sep client doing the same.However in the daily scan all these exe files in the shared drive would automatically get scanned and cleaned.But it was found that when we perform a custom scan on the shared folder on the file server,  the custom scan does not detect any file inside the shared folder and get a pop up that  0 files are scanned.From further investigation it was found that  the shared folders are replicating continuously using the WAFS Technology.When we right click on these folder and scan for viruses the scan shows 0 files scanned.

However if we try using Microsoft Security Essesntials the files inside the shared folders are getting scanned.

***Concern***

Q) Why SEP is not able to scan the Mirrored folder on the file server?

Answer)Symantec Endpoint Protection is not able to scan the mirrored drives on the fileserver and this is as per the Product Design.Hence the original location needs to be scanned by SEP instead of the mirrored folder on the FileServer to remove the infections.

 

 

 



Article URL http://www.symantec.com/docs/TECH199916


Terms of use for this information are found in Legal Notices