We have SEP installed on all our fileservers, however, we only use the Antivirus component. No PTP or NTP and everything works fine. Keep in mind this is only scanning the C: drive, not the shares.

To do that, you can use the SAV for NAS product for your filers/cifs. It is a separate product and not manageable from SEPM.

Hello,

Believe me , Kurt is correct.

Let me get things right, you want to improve performance as well as keep the scan Enabled...

We see that you are very much interested in having your scans more of Performance based and should use as much as less CPU usage.

Check these documents as below:

1) Enabling multithreaded scans

http://www.symantec.com/business/support/index?pag...

2) Symantec Endpoint Protection scan tuning options

http://www.symantec.com/business/support/index?pag...

LOCK ALL SETTINGS!!!

Administrator defined scan

• It is recommended that a monthly scan should be configured to occur in a maintenance window when the server is not under a heavy load
• File type scanning can be limited to high risk extensions to increase scanning speed
• Scan times should be randomized on virtual machines to avoid resource usage issues
• Turn off retry interval to ensure missed scans do not run during business hours
• Set first action to Quarantine for all detection types
• Set second action to Delete for all detection types
• Enable – Terminate processes automatically
• Enable – Stop services automatically

File System Auto-Protect

• Scan only selected extensions
• Determine file types by examining file contents (turn off for even better performance)
• Do not scan when a file is backed up
• Disable Network scanning of remote computers
• Do not check for boot record viruses
• Set first action to Quarantine for all detection types
• Set second action to Delete for all detection types
• Lock all override actions so that end users can’t modify
• Enable – Terminate processes automatically
• Enable – Stop services automatically
• Disable notifications to end users
• Load auto protect when SEP starts
• Do not scan floppies on computer shutdown
• Enable Risk Tracer (disable for more performance)

Disable and Lock Internet Email Auto-Protect
Disable and Lock Microsoft Outlook Email Auto-Protect
Disable and Lock Lotus Notes Auto-Protect
Disable TruScan Proactive Threat Scans

Quarantine

• Do Nothing when new definitions arrive
• Delete oldest files to limit folder size to 500MB for all files

Thank you all for your answers,

I will have a look at the Documentation and keep your Settings as a "baseline", zer0.

I'll come back to this, should I encounter more problems :-)

This also may help:

Symantec Endpoint Protection Client configuration changes for performance optimization

http://www.symantec.com/business/support/index?pag...

From the list of bookmarks that I normally use.