Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

EndPoint Protection auto-protect

Updated: 21 May 2010 | 3 comments
Hartnett Smith's picture
0 0 Votes
Login to vote
This issue has been solved. See solution.

I have SBS Endpoint protection 11.0 MR4 4014 on a server that is using an application running Microsoft SQL Express.  Since i installed a managed  client (AV & Spyware only) on the server, the users of the SQL apps are getting server timeout errors.  The developers of this apps, asked me to disable the AV scanning  to see if this was causing the problem.  But, everytime I disable the auto-protect it restarts. 
I moved the server to a separate group from the workstations and unchecked the inheritance box and the auto-protect policy.  I updated the client with the new policy.  It accepted the auto-protect off policy.  Five minutes later it is back on. 
Is their an auto-protect policy to restart after so many minutes?

Comments

SKlassen's picture
17
May
2009
0 Votes 0
Login to vote

Look in your AV policy. 

Look in your AV policy.  You'll find the setting under File System Auto-Protect on the Advanced tab.

Hartnett Smith's picture
17
May
2009
0 Votes 0
Login to vote

If it was a snake

Thanks.  I looked at that page at least 10 times and did not notice it.

sandip_sali's picture
18
May
2009
1 Vote +1
Login to vote

EndPoint Protection auto-protect

Hi,

      Since the clients are managed they will communicate with the SEPM Symantec Endpoint Manager at the default time interval of five minutes(unless you have chaged the settings) this is commonly known as the heart beat interval. To further narrow down on what dependency can cause this issue please follow the steps below and let us know whether it helped.

1. Open the Symantec Endpoint Protection Manager.
2. Select Policies from the far left.
3. Highlight Antivirus and Antispyware under the View Policies section in the middle column.
4. Highlight the active policy from the right side of the manager.
5. Click Edit the Policy under the Tasks menu is the middle column.
6. A new window will open.
7. Select Administrator-defined Scans from the far left menu in the new window.
8. Select the Advanced tab.
9. From under Startup and Triggered Scans uncheck Run startup scans when users log on and Run an active scan when new definitions arrive.

When you configure Auto-Protect options, you can click the lock icon next
to the Auto-Protect settings. Users with the client computers that use this policy
cannot change the locked settings

File System Auto-Protect uses a file cache so that it remembers the clean files
from the last scan. The file cache persists across startups. If the client computer
shuts down and restarts, File System Auto-Protect remembers the clean files and
does not scan them.
File System Auto-Protect rescans the files in the following situations:
■ The client computer downloads new definitions.
■ Auto-Protect detects that the files might have changed when Auto-Protect
was not running.
You can disable the file cache if you always want Auto-Protect to scan every file.
If you disable the file cache, you might impact the performance of your client
computers.
You can also set the following parameters:
■ The file cache size
The default cache size is 10,000 files per volume. You can change the cache
size if you want File System Auto-Protect to rescan more or fewer files.
■ Whether or not Auto-Protect rescans the cache when new definitions load
You might want to disable this parameter to improve File System Auto-Protect
performance

Thanks & Regards Sandip C Sali