Endpoint Protection

Hi ,

I am using SEP 11.0 MR4MP1a. We have schedule scan every week at 12pm.

When the schedule scan run on the client machines, the CPU utilisation goes as high as 95%-99%.

Our system config is as follows

O/S :- Windows XP SP3, Intel PIV, 1GB RAM, 1.8 Hgz
Appliation installed :-  MS OFFICE, Lotus Notes 7.x for email. IE 7.0.

We have also set in SEPM the tuningn option for "Best Application performance" but still this is the case.

Attached snapshot which i've taken . Look for Rtvscan.exe process. This was taken during schedule scan in process.



Any suggestions on this..

Rgrds,
SAM

Hi Sam,

No attached snapshots.

All are facing this issue I think this problem will never fixed in any released.

Hi Mansoor,

Are you able to get the rid of snapshot?????

Can you pls elaborate what exact issues are you facing at your end>

Rgds,
SAM

 I thought this was getting fixed in MP2

The "Best application performance" will throttle the scan until the amount of IO by the other processes goes down, If there is no IO being done by the other processes it will take the CPU.

Reference: http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/ec1422e07c11c714882574b0005ade87?OpenDocument

 Is there a probability of say the SEP can wait for 5 min, detect no activity happening and then ramp up CPU usage to 90% maybe instead of instantaneous changover?

I am not sure how long does it take for the RtVsan.exe to throttle the CPU but in my opinion the quicker it is the better it is.

 Thats the biggest isue. People stop working to pick up a phone and by then the CPU is being fully utilized, employee comes back and finds his/her machine running very slow. Its a very common problem that we as admins have to face

On the policy which defines the schedule scan, edit the schedule scan and then in the option (which you'll try to find it!) you can see that you can adjust the priority of the scan versus the other application. Reduce it down and see if it helps or not.

I do not know how it's designed to work. But does it not switch back the throttling to low when their processes start taking the CPU?

As Farzad posted, you could refine the CPU utilization simpy reducing the priority.  But remember that if you reduce the priority as conseguence the time scan will be increased. 

HI,

As mentioned in my post, we have already set to " Best Application performance " but still its 90% and above.

Any further fine-tuning help will be appreciated.

Rgrds,
SAM

this is the mazor issue with symantec.

I am also facing this problem, Help

Hi, where is the screenshot? is this happening to all machines?