Video Screencast Help
Symantec Appoints Michael A. Brown CEO. Learn more.

Best Scan times and What to scan

Created: 09 May 2013 • Updated: 09 May 2013 | 13 comments

Right now I am in charge of the SEP server and was trying to determine when are the best times to scan and also what we should be scanning. Please let me know your ideas so I can implement them into my SEP server.

 

Thanks,

Joshua

Operating Systems:

Comments 13 CommentsJump to latest comment

.Brian's picture

Ideally, you want to run a full weekly scheduled scan. Best times are usually around lunch when your users are away or if you leave your machines on, you can run it overnight.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

joshua982's picture

Brian81

We run ours on Thursday night at around 8pm but was wondering if we need to run quick scans each day at noon or could we reduce that to like twice a week with the full scan on Thursday.

Thanks,

Joshua

.Brian's picture

Are you getting a large amount of detections?

An active scan shouldn't only take a couple of minutes and is useful. But if you have a pretty clean environment, it may be overkill.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Rafeeq's picture

 

Please check this document
 
Security Response recommendations for Symantec Endpoint Protection settings

joshua982's picture

Brian81,

 

Personally I think it is overkill and would like to reduce it. We have the occasional user that will complain about performance when the daily scan runs. But they actually have to go look to see if it is running in the background. Some crazy users that think it effects them but it doesnt it.

 

Thanks,

Joshua

joshua982's picture

Refeeq,

 

Thanks for the info, will take a look at it.

 

Joshua

SMLatCST's picture

The Symantec recommendation is actually that you perform a Daily Active Scan, with either monthly or weekly full scans as required (as described in the below article):

http://www.symantec.com/docs/HOWTO80940

It's really up to you if these are appropriate for your environment tho

SebastianZ's picture

Have a look as well on following KB:

Adjusting scans to increase protection on your client computers

Article:HOWTO55307  |  Created: 2011-06-29  |  Updated: 2011-12-17  |  Article URL http://www.symantec.com/docs/HOWTO55307

Security Response recommendations for Symantec Endpoint Protection 12.1 settings

Article:TECH173752  |  Created: 2011-11-07  |  Updated: 2011-11-21  |  Article URL http://www.symantec.com/docs/TECH173752

 

Nagaraj Kukke's picture

enable startup scan

enable active scan for daily

enable full scan for weekly 

dissable the activescan after dat update 

scan once a day is more otherwise system perfomance will go down

Thanks & Regards,

Nagaraj Kukke

Mithun Sanghavi's picture

Hello,

SEP 12.1 minimizes the impact of a scan to the end user by improving on the existing scan throttling settings.  Scan settings are configured via SEPM AV policies.  

Scan Tuning initiates "Scan on Idle."  This new feature works with Scheduled Scans, On Demand, and Active Scans.  (The Right-click scan in Windows Explorer runs with "Best Scan Performance")

Secondly, check these Articles:

About the default Virus and Spyware Protection policy scan settings

http://www.symantec.com/docs/HOWTO55223

Adjusting scans to improve computer performance

http://www.symantec.com/docs/HOWTO80964

Adjusting scans to increase protection on your client computers

http://www.symantec.com/docs/HOWTO81016

Customizing administrator-defined scans for the clients that run on Windows computers

http://www.symantec.com/docs/HOWTO81013

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

AjinBabu's picture

Hi, 

Normally weekly a full scan on non peak hours of your business.

Regards

Ajin

durbab@microland.com's picture

Hi Team,

I am new to this tool, could you please help me to solve my query?

Does Netbackup 7.5 has the ability to manage the Netapps NDMP snapshot?

 

Regards,

Durba

 

 

.Brian's picture

You should post this question in the netbackup forum. This forum is for SEP

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.