Endpoint Protection

 View Only

  • 1.  Disabling of Rescan of File Cache on new virus definitions arrival

    Posted Oct 30, 2014 04:46 AM

    Hi,

    We have a few servers running a critical application. At times, the application team reports the servers as responding very slow.

    Analysis revealed that the 'ccSvcHst.exe' service was consuming the servers' resources; i.e., CPU usage spikes, I/O runs huge, exactly at those times, when they reported the problem.

    Searches on forums talk about disabling the following.

    1. Disabling of File Cache

    2. Disabling of Rescan of File Cache on new virus definitions arrival

     

    Questions:

    Going with point no.2, - as I understand, implementing a new policy with 'Rescan of File Cache' disabled will clear the File Cache, and will rebuild it with subsequent virus definitions downloads.

    What I need to understand is,

    1. with 'Rescan of File Cache' disabled, will the File Cache be scanned at any time later in future OR

    2. will it only get rebuilt with files deemed 'Clean', but never scan scanned AND only get scan when file(s) within the File Cache are accessed or modified?

    3. additionally, can rescanning of the File Cache be staggered to take place at a later time rather than making it happen 'Immediately'? That might not comsume much system resources as it does at the moment.

     

    Thanks,

    Jimmy

     



  • 2.  RE: Disabling of Rescan of File Cache on new virus definitions arrival
    Best Answer

    Posted Oct 30, 2014 05:00 AM

    It will be scanned during your weekly scheduled scan.... If any file is accessed it will be scanned by auto protect

    About the file cache

    http://www.symantec.com/business/support/index?page=content&id=HOWTO27136
     

    How does the "Rescan the cache when new definitions load" feature work in SEP?

    http://www.symantec.com/business/support/index?page=content&id=TECH191600

     


  • 3.  RE: Disabling of Rescan of File Cache on new virus definitions arrival

    Posted Oct 30, 2014 06:14 AM

    Thanks Rafeeq for the prompt response!

    Nice to know that the 'File Cache' would get scanned by 'Scheduled Weekly Full-Scan'.