Backup Exec for Windows Servers - Backup and Restore job rates are extremely slow with Symantec Endpoint Protection (SEP) 11 is installed.
| Article:TECH61909 | | | Created: 2008-01-23 | | | Updated: 2011-11-03 | | | Article URL http://www.symantec.com/docs/TECH61909 |
Problem
Backup Exec for Windows Servers - Backup and Restore job rates are extremely slow with Symantec Endpoint Protection (SEP) 11 installed.
Solution
The Symantec Endpoint Protection team recently released Release Update 7 (SEP 11 RU7).
This update addresses backup performance problems.
The Symantec Endpoint Protection, RU7 Release Notes can be found in the following technote:
Release notes for Endpoint Protection and Network Access Control 11
The following, temporary solution, will work until Symantec Endpoint Protection RU7 or later has been installed:
1. Exclude the following processes from within the Symantec Endpoint Protection Manager (SEPM)
Firewall Policy > Rules > Add a rule to allow an application:
(Change C:\ as needed depending on which root volume the Media Server or Remote Agent is installed to.)
This update addresses backup performance problems.
The Symantec Endpoint Protection, RU7 Release Notes can be found in the following technote:
Release notes for Endpoint Protection and Network Access Control 11
The following, temporary solution, will work until Symantec Endpoint Protection RU7 or later has been installed:
1. Exclude the following processes from within the Symantec Endpoint Protection Manager (SEPM)
Firewall Policy > Rules > Add a rule to allow an application:
(Change C:\ as needed depending on which root volume the Media Server or Remote Agent is installed to.)
- C:\Program Files\Symantec\Backup Exec\beremote.exe
- C:\Program Files\Symantec\Backup Exec\beserver.exe
- C:\Program Files\Symantec\Backup Exec\bengine.exe
- C:\Program Files\Symantec\Backup Exec\benetns.exe
- C:\Program Files\Symantec\Backup Exec\pvlsvr.exe
- C:\Program Files\Symantec\Backup Exec\BkUpexec.exe
- C:\Program Files\Symantec\Backup Exec\RAWS\beremote.exe
2. Change the following File System Auto-Protect settings in the Symantec Endpoint Protection Manager (SEPM) for each profile where an associated client has the Remote Agent for Windows Servers installed. Policies Tab > Antivirus & AntiSpyware > Right Click - Edit > File System Auto-Protect > Advanced Scanning and Monitoring:
- Change "Scan when a file is accessed or modified" to "Scan when a file is modified"
- Uncheck "Scan when a file is backed up"
Alternatively, the settings can be changed per Symantec Endpoint Protection (SEP) client as well.
NOTE: If the SEP client uses a policy from the assigned SEPM, these settings will not stay applied and the changes will need to be performed from the SEPM:
NOTE: If the SEP client uses a policy from the assigned SEPM, these settings will not stay applied and the changes will need to be performed from the SEPM:
- Open the SEP client GUI
- Click "Change Settings"
- Click "Configure" for "Antivirus and Antispyware Protection Settings"
- Click the tab labeled "File System Auto-Protect"
- Click the button labeled "Advanced"
- Change "Scan when a file is accessed or modified" to "Scan when a file is modified"
- Uncheck "Scan when a file is backed up"
- Click Ok
- Click Ok again
Close the SEP client GUI
Once this is completed successfully run the backups and check for the Job Rate increase.
This document also exists within Symantec's Endpoint Protection Documentation - With Symantec Endpoint Protection 11.0 installed, system backups run slower than usual
This document also exists within Symantec's Endpoint Protection Documentation - With Symantec Endpoint Protection 11.0 installed, system backups run slower than usual
Addition details about changing the "Scan files when" Option:
- Scan when a file is accessed or modified: Scans the files when they are written, opened, moved, copied, or run. Use this option for more complete file system protection. This option might have a performance impact because Auto-Protect scans files during all types of operations.
- Scan when a file is modified: Scans the files when they are written, modified, or copied. Use this option for slightly faster performance.
Scan when a file is backed up: Scans the files when they are accessed during a backup operation. Use this option when a scan has not been run on the files that need to be backed up. By using this option, backup operations will be significantly slower, because Auto-Protect scans each file that is included in the backup.
Note: This setting applies only to files that are backed up. Auto-Protect scans the files that are restored from backup regardless of this setting.
If you need the SEP 11 RU7, please see Obtaining the latest version of Endpoint Protection or Network Access Control.
|
|
| Value | 1275606 |
| Description | File backups are at least 80% slower with SEP installed |
Related Articles
Legacy ID
306552
Article URL http://www.symantec.com/docs/TECH61909
Terms of use for this information are found in Legal Notices
Thank you.