Video Screencast Help
Security Community Blog

Scan Engine: How to configure resource parameters correctly

Created: 08 Dec 2009 • Updated: 08 Dec 2009 • 4 comments
DominikG's picture
0 0 Votes
Login to vote
I am receiving many support requests related to scan errors of the scan engine, which are caused by a suboptimal usage of the system resources, or because someone simply did not configure the parameters in the right way.
The scan engine is not software that can be set up and is good to go. In each environment, there has to be done some tuning to avoid errors and/or performance issues.
For that reason I talked to Symantec’s tech support to get a little help on how to configure the resource parameters correctly.
 
So if you are experiencing scan errors in a large amount or get reports of bad performance, please check the following steps:
 
1. Open the scan engine interface and go to “reports” -> “resources”
2. Note the value of “thread pool size”
3. Note the value of “Load statistics” -> “queued requests”
4. Do queued requests increase while the scan engine is under load? If it increases please note how much it increases by. If it increases then you do not have enough threads to service the requests and you need to increase your configuration at “resources” -> “Number of available threads for scanning” by the amount you have already noted. I.e. if you notice that your queue has got 20 queued requests while the scan engine is under load and your thread pool size (Number of available threads for scanning) is 130 then you are short 20 threads so increase your Number of available threads for scanning by 20, bringing it up to 150.
5. If you have not had a queue then you simply need to try some tuning of the available resources as follows:
- Check your complete system memory, i.e. 2GB.
- Subtract from this the amount of memory the operating system needs to run smoothly, in this case say 700MB for Windows, that leaves us with 1300MB for use by scan engine.
- Set “configuration” -> “resources” -> “server resources” - > “Maximum ram used for in-memory file system” to 1300MB
- Divide 1300MB by (in this example) 150 (number of threads) to get the value for “Maximum file size stored within the in-memory file system”, so that you are using the optimal amount of memory, threads and file size chunks to use the memory in an optimal fashion.
This should ensure that you are using the resources as well as you can.
 
Many thanks on Symantec’s tech support for that detailed manual on how to configure the parameters the right way. As I have seen many systems which have not been configured like described above, I think this will help some other users around here, too.

Comments 4 CommentsJump to latest comment

Bijay.Swain's picture

Hi

. Open the scan engine interface and go to “reports” -> “resources”

Can you please tell me how to open scan engine interface.

Here most of the systems are running very slow . so I think this might help us.

-1
Login to vote
DominikG's picture

Hello Bijay,

no problem. Just open a browser window and connect to https://<scanengine machine name or ip>:8004

Consultant
PMCS.helpLine Software Gruppe
www.pmcs.de

follow us on Twitter: PMCS_NBU ; PMCS_BE ; PMCS_EV

+1
Login to vote
Bijay.Swain's picture

page can't be displayed message appears when i try https://10.33.1.27:8004

-1
Login to vote
DominikG's picture

Have you tried http:// instead of https:// ??

if you are using a proxy, please make sure, that you bypass it for local addresses.

Does a firewall perhaps block the port??

On what kind of OS is the scan engine installed?

Consultant
PMCS.helpLine Software Gruppe
www.pmcs.de

follow us on Twitter: PMCS_NBU ; PMCS_BE ; PMCS_EV

-1
Login to vote