Defwatch scan SEP12.1
just noticed on a server 2003 box with SEP 12.1 RU1 that the defwatch scans complete much quicker than the daily scheduled active scan. My understanding is that defwatch and active scan are essentially the same thing. That is certainly what I have been told whenever I have asked. Why does active take about 5 times longer? What is the defwatch scan NOT scanning or why is it so fast?