We experience similar speed problems. Symantec Client Security 3.1, Maintenance Release 7 (MR7). Novell NetWare 6.5 SP6 antivirus server. Windows XP Pro workstations with at least SP2. Some workstations have had all current windows updates to date - 3-7-08. Microsoft File and Printer Sharing disabled. We disable MANY services that are not needed or used in our environment. NetWare Client 4.91 with patches and 4.92. Power saving features like standby and hibernation are not used.
The boot time is a killer. 3.0 to 3.5 on our Celeron 2.2 GHZ machines, 256MB and 512MB DDR PC2700 systems. IDE drives using DMA 5 (UDMA 100 ?). These times are after performing any 'tuning'.
Faster CPUs with faster memory yeild a faster boot time.
I have even used Microsoft BOOTVIS to try and improve boot times. Also use MSCONFIG to remove items from the Startup. Also use full disk defrag. Removing items from the startup yeilded little to no measurable improvement. Full disk defrag yeiled the most improvement. Using BOOTVIS to Optimize Boot time yeilds some improvement.
Symantec support suggests turning off features we need to have on in our industry. Our industry is community banking.
Setting the Client Firewall to Manual start povides a 1 to 1.5 minute shortening of the boot time. But we need it on.
The machines boot VERY quickly with the Symantec Client Security not installed.
Setting the system to NO Virtual Memory or swap file showed no difference. This matahes what the Symantec tech. told me: the product does not use virtual memory. He also had the gall to comment about the 512MB RAM machines being ' . . . on the low end.' He did say the product uses about 128MB RAM for it's own use.
Well, using Windows Task Manager, Processes tab, additional columns, shows me what the memory foot-print is of the running software after logon. and without running our applications and no virtual memory, we were only using about 380MB for the processes shown.
When I perform a BOOTVIS Trace with Driver Delay, it shows a graph of resouce usage. There is a section at about 1 minute to 1.75 minutes that shows the 'Logon+Serv' processes and no disk or other activity. Other sections of the boot process show the CPU pegged at 100% for a small portion of the time.
The Symantec software has just grown to something very large and 'costly' in its' use of system resources.
We are trying to tune the machines and software settings and perhaps use Standby or Hibernation modes to provide a faster 'startup' for the hourly personnel to clock in with.
I suspect we are going to have to bite the bullet and purchase new equipment. These machines in question are about 3 to 4 years old now. We like to get as much value out of equipment as possible and dislike spending money. We are still using old Compaq DeskPro EN and EP machines with 500MHZ to 800MHZ processors with Win XP for some lite-weight functions.
I don't recommend moving to the EndPointSecurity product. Problems mentioned include speed and inability to run some applications. See:
https://forums.symantec.com/syment/board?board.id=endpointcustI'll try to post any resolutions or work arounds here - If we find any. Please do the same.