Endpoint Protection

 View Only

  • 1.  SAVFL - Provide a list with the files to be scanned ? Or use incremental scanning ?

    Posted Oct 18, 2010 09:12 AM

    Good morning everyone.

    We work on a specific production scenario where the use of RealTime scanning would not be an option,
    due to system resources limits.

    My plan is to go with scheduled scans, but even on this situation, it would take a lot of time/system resources
    if we scanned all that data. Would it be possible to enable some kind of incremental scan ? This                
    way only the changed/accessed files would be scanned.

    An alternative option would be to provide a file list to the scan process, where we would have all the entries
    we need to scan (We already have this listing generated from time-to-time)

    I am aware that this is not the preferred solution, but RealTime scans were not an option, according to our
    preliminary tests. We could try tuning the RealTime scan, but we need to know what to try...

    The solution is based on : Linux + SAVFL + MR10

    Best Regards,
    Renato Granzoto



  • 2.  RE: SAVFL - Provide a list with the files to be scanned ? Or use incremental scanning ?

    Posted Oct 18, 2010 10:03 AM

    I dont think its possible..

    it changes the atrributes however does not check attributes before scan

    http://www.symantec.com/business/support/index?page=content&id=TECH102698&locale=en_US

     

    You can try these two combinations

     

    How to configure Vpscan.exe by using Vpscan.ini

     


  • 3.  RE: SAVFL - Provide a list with the files to be scanned ? Or use incremental scanning ?

    Posted Oct 18, 2010 08:50 PM

    Not sure if it fits, but Symantec Scan Engine might be a better choice in your environment?

    http://www.symantec.com/business/scan-engine