Backup Exec for Windows Servers - Backup and Restore job rates are extremely slow with Symantec Endpoint Protection (SEP) 11 is installed.

Article:TECH61909  |  Created: 2008-01-23  |  Updated: 2014-02-26  |  Article URL http://www.symantec.com/docs/TECH61909
Article Type
Technical Solution

Product(s)

Issue



Backup Exec for Windows Servers - Backup and Restore job rates are extremely slow with Symantec Endpoint Protection (SEP) 11 installed.


Solution



The Symantec Endpoint Protection team recently released Release Update 7 (SEP 11 RU7).

This update addresses backup performance problems.

The Symantec Endpoint Protection, RU7 Release Notes can be found in the following technote:
 Release notes for Endpoint Protection and Network Access Control 11

The following, temporary solution, will work until Symantec Endpoint Protection RU7 or later has been installed:

1. Exclude the following processes from within the Symantec Endpoint Protection Manager (SEPM)
Firewall Policy > Rules > Add a rule to allow an application:
(Change C:\ as needed depending on which root volume the Media Server or Remote Agent is installed to.)
  • C:\Program Files\Symantec\Backup Exec\beremote.exe
  • C:\Program Files\Symantec\Backup Exec\beserver.exe
  • C:\Program Files\Symantec\Backup Exec\bengine.exe
  • C:\Program Files\Symantec\Backup Exec\benetns.exe
  • C:\Program Files\Symantec\Backup Exec\pvlsvr.exe
  • C:\Program Files\Symantec\Backup Exec\BkUpexec.exe
  • C:\Program Files\Symantec\Backup Exec\RAWS\beremote.exe

 
2. Change the following File System Auto-Protect settings in the Symantec Endpoint Protection Manager (SEPM) for each profile where an associated client has the Remote Agent for Windows Servers installed. Policies Tab > Antivirus & AntiSpyware > Right Click - Edit > File System Auto-Protect > Advanced Scanning and Monitoring:
  • Change "Scan when a file is accessed or modified" to "Scan when a file is modified"
  • Uncheck "Scan when a file is backed up
Alternatively, the settings can be changed per Symantec Endpoint Protection (SEP) client as well.
NOTE: If the SEP client uses a policy from the assigned SEPM, these settings will not stay applied and the changes will need to be performed from the SEPM:
 
  • Open the SEP client GUI
  • Click "Change Settings"
  • Click "Configure" for "Antivirus and Antispyware Protection Settings"
  • Click the tab labeled "File System Auto-Protect"
  • Click the button labeled "Advanced"
  • Change "Scan when a file is accessed or modified" to "Scan when a file is modified"
  • Uncheck "Scan when a file is backed up"
  • Click Ok
  • Click Ok again
Close the SEP client GUI
 

 

 
Once this is completed successfully run the backups and check for the Job Rate increase.

This document also exists within Symantec's Endpoint Protection Documentation - With Symantec Endpoint Protection 11.0 installed, system backups run slower than usual 

 
Addition details about changing the "Scan files when" Option:
 
  • Scan when a file is accessed or modified: Scans the files when they are written, opened, moved, copied, or run. Use this option for more complete file system protection. This option might have a performance impact because Auto-Protect scans files during all types of operations.
  • Scan when a file is modified: Scans the files when they are written, modified, or copied. Use this option for slightly faster performance.
Scan when a file is backed up: Scans the files when they are accessed during a backup operation. Use this option when a scan has not been run on the files that need to be backed up. By using this option, backup operations will be significantly slower, because Auto-Protect scans each file that is included in the backup.
 

 
Note: This setting applies only to files that are backed up. Auto-Protect scans the files that are restored from backup regardless of this setting.
 

 


Supplemental Materials

Value1275606
Description

File backups are at least 80% slower with SEP installed



Legacy ID



306552


Article URL http://www.symantec.com/docs/TECH61909


Terms of use for this information are found in Legal Notices