Right now I am in charge of the SEP server and was trying to determine when are the best times to scan and also what we should be scanning. Please let me know your ideas so I can implement them into my SEP server.

Thanks,

Joshua

Ideally, you want to run a full weekly scheduled scan. Best times are usually around lunch when your users are away or if you leave your machines on, you can run it overnight.

Brian81

We run ours on Thursday night at around 8pm but was wondering if we need to run quick scans each day at noon or could we reduce that to like twice a week with the full scan on Thursday.

Thanks,

Joshua

Are you getting a large amount of detections?

An active scan shouldn't only take a couple of minutes and is useful. But if you have a pretty clean environment, it may be overkill.

Please check this document

Security Response recommendations for Symantec Endpoint Protection settings

Brian81,

Personally I think it is overkill and would like to reduce it. We have the occasional user that will complain about performance when the daily scan runs. But they actually have to go look to see if it is running in the background. Some crazy users that think it effects them but it doesnt it.

Thanks,

Joshua

Refeeq,

Thanks for the info, will take a look at it.

Joshua

The Symantec recommendation is actually that you perform a Daily Active Scan, with either monthly or weekly full scans as required (as described in the below article):

http://www.symantec.com/docs/HOWTO80940

It's really up to you if these are appropriate for your environment tho

Have a look as well on following KB:

Adjusting scans to increase protection on your client computers

Security Response recommendations for Symantec Endpoint Protection 12.1 settings

enable startup scan

enable active scan for daily

enable full scan for weekly 

dissable the activescan after dat update 

scan once a day is more otherwise system perfomance will go down

Hello,

SEP 12.1 minimizes the impact of a scan to the end user by improving on the existing scan throttling settings.  Scan settings are configured via SEPM AV policies.  

Scan Tuning initiates "Scan on Idle."  This new feature works with Scheduled Scans, On Demand, and Active Scans.  (The Right-click scan in Windows Explorer runs with "Best Scan Performance")

Secondly, check these Articles:

About the default Virus and Spyware Protection policy scan settings

http://www.symantec.com/docs/HOWTO55223

Adjusting scans to improve computer performance

http://www.symantec.com/docs/HOWTO80964

Adjusting scans to increase protection on your client computers

http://www.symantec.com/docs/HOWTO81016

Customizing administrator-defined scans for the clients that run on Windows computers

http://www.symantec.com/docs/HOWTO81013

Hope that helps!!

Hi, 

Normally weekly a full scan on non peak hours of your business.

Regards

Ajin

Hi Team,

I am new to this tool, could you please help me to solve my query?

Does Netbackup 7.5 has the ability to manage the Netapps NDMP snapshot?

Regards,

Durba

You should post this question in the netbackup forum. This forum is for SEP