Endpoint Protection

 View Only
  • 1.  SEP 11 - Backup Servers

    Posted Dec 07, 2010 10:34 PM

    Good afternoon,

    We are currently experiancing some major issues with Symantec EndPoint Protection clients on
    "Backup Servers" running Commvault. It appears since we have installed our client, Commvault has increased it's backup sizes to many many GB's.

    It appears that SEP11 client is seeing Commvault as a "User" who is "accessing" files for a backup. As we have "Auto-Protect" on, symantec scans the file accessed (all of the files on the server). Once Symantec scans these files, commvault then has another daily check and see's that files were modified/accessed by another sourse (SEP) and starts backing them up again, which initiates another AutoProtect scan and so own repeately.

    This is causing our backup servers (commvault) to take around 1 week just for an Incremental backup. Full backups have been running for weeks now with no success.

    If anyone has any ideas or recommendation weather SEP and Commvault could interfere with eachothers work, or if there is any work arounds for this / quick fix - please let me know as soon as possible.

    We only have standard Antivirus and Antispyware turned on.
    As I am out of suggestions, we are thinking of removing the clients from servers completely.

    Thank you in advance.

    Kind regards,

    Dragan
    IT Security Engineer



  • 2.  RE: SEP 11 - Backup Servers
    Best Answer

    Posted Dec 07, 2010 11:01 PM

    Disable "Scan when a file is backed up" and change scan of files only when modified:
      Click the Policies Tab.
      Click Antivirus and Antispyware.
      Click the policy you would like to modify and then click Edit the Policy.
      Click File System Auto-Protect.
      Under "Scanning" click on Advanced Scanning and Monitoring...
      Uncheck "Scan when a file is backed up"
      Check "Scan when a file is modified"
      Click OK to close "Advanced Scanning and Monitoring"
      Click OK to close "Antivirus and Antispyware Policy" saving the settings
      Assign the policy by clicking Assign the Policy, then check each group to which the policy    should apply.
      Click Assign, then click Yes

    If not helps try this also

    Disable Network Drive Scanning:
      Click the Policies Tab.
      Click Antivirus and Antispyware.
      Click the policy you would like to modify and then click Edit the Policy.
      Click File System Auto-Protect.
      Under Network Settings, uncheck Network.
      Click OK.
      Assign the policy by clicking Assign the Policy, then check each group to which the policy    should apply.
      Click Assign, then click Yes.



  • 3.  RE: SEP 11 - Backup Servers

    Posted Dec 13, 2010 01:05 PM

    If this is an issue, you can edit your AV policy in SEPM to only scan when a file is modified rather than accessed. This should cut down on the backup storage issue.



  • 4.  RE: SEP 11 - Backup Servers

    Posted Feb 08, 2011 10:34 PM

    Many thanks for your reply. Worked just fine.