Mac SEP client utilizing high amount of memory
I am in the process of deploying SEP 12.1 RU1 MP1 to my organization. In my organization I have a variety of Mac clients ranging from OS X 10.4 to OS X 10.8. I have been noticing the clients running slow and checked Activity Monitor. Activity Monitor showed the navx and SymAutoProtect processes using a lot of memory. The machine I tested on was a Intel iMac with 2GB RAM running SEP 12.1. I have attached a screenshot of Activity Monitor. I then decided to test SEP 11 RU7 and I tested it on a MacBook with 4GB RAM running SEP 12.1. Activity Monitor showed the same results (see second screenshot). Has anyone noticed this before? Thank you.
Navx (the 'command
Navx (the 'command line/scheduled scan' scan engine) shouldn't be running constantly, nor should AutoProtect. When are your scans scheduled to run, and are there a lot of compressed files on these machines? What function do your Macs have? A lot of file transfers?
High CPU Usage on Symantec Endpoint Protection for Macintosh clients with NAVX process
Might want to turn off scanning of compressed files, especially if using disk encryption. Any potential malicious content inside a compressed file will be snagged by AutoProtect when the file is unarchived.
Symantec AntiVirus and Endpoint Protection for Macintosh: How to Disable Scanning of Compressed Archives
The exclusions/exceptions Brian81 noted above will only work for AutoProtect.
Edit: you did say memory, not CPU. Duh. Anyway, they should not, to my knowledge, even be running unless they are doing something (a scan, either scheduled or real-time).