Network connections to server fail when SEP is loading new virus defs
Created: 14 Mar 2008 | Updated: 23 May 2010 | 2 comments
All network connections to our server fail when SEP is loading new virus definitions and running a quick scan.
Whenever this happens, no clients can connect to the internet, whether they are running SEP or any other anti-virus program. They cannot ping the server or use the server in any other way during the 8 to 10 minutes it takes to complete the virus scan. Once the scan is done, the event viewer logs an event "Secars started" and another one that says "Scan complete" and everything returns to normal.
This Microsoft Windows Server 2003 is running SEP and hosting SEPM for the domain. It also runs VMWare Server with an instance of MS Server 2003 running Microsoft ISA 2006. Basically, this computer is our only gateway to the internet. We have updated the server to SEP 11, MR1.
We have tried to reschedule LiveUpdate to run in the middle of the night, but it still continues to run a couple of times per day at random times. We also just today unchecked the option for running a quick scan every time a new definition file is received so hopefully that will help solve this problem too. But, it doesn't make too much sense.
We appreciate any ideas or help with this issue!