SEP "Network scanning"
I am wondering how network scanning is done. The reference to it that I see in the help file is "File System Auto-Protect network scanning", which says it will scan network drives.
My concern is this: If I have 150 users who all have access to both personal and public shared folders on a server via mapped drives, is this network scanning causing 150 SEP clients to constantly be scanning files on the server, sending that traffic (the scan control data + the actual files themselves over the network? As I understand Auto-Protect, it would only scan the stuff you're accessing, so if you open the Q: drive and there are 100 files there but you only open one Word file, it only scans one Word file. Or is it hat because you opened that drive and it dispalys and lists the files (thus it is reading them even if not executing them), would the scanner scan all of them as well?
Comments
Read this Configuring
Read this
Configuring Network Scan Settings in Symantec Endpoint Protection
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2009081307565748
VMWARE-- SEP 12.1 vs McAfee vs Trend Micro
MIXIT I would not hold your
MIXIT I would not hold your breath for an anser I have asked similar questions in my thread here https://www-secure.symantec.com/connect/forums/information-sep-files-system-auto-protect-network-settings-0 and had no real answer to my questions.
There seems a distinct lack of technical information regarding this feature. Our concern in is if someone has a large number of files on a network share and changes to to thumbnail view. In this view the file is openned and hence SEP will scan the each and every file depending on how SEP does the scan is to what effect it has on the network bandwidth. example SEP will cache the file if the option os not disabled (no one can tell me where the cache is so I assume the local workstation) this means if someone has serval hundered files (not uncommon in our business) in a folder open the folder in thumbnail preview, all of these files will be scanned i.e. pulling a copy of every file to the misteries SEP cache because thumbnail view opens the file. This could be several Gig's worth of data traveling down the network and bang there goes your remote site!!
Not good when the remote sites for are are our income stream!!
I am actually going to log a call as if Symantec can provide me with technical information on this feature. if I get anything I will post it up.
Hi, You could set the
Hi,
You could set the auto-protect scan option, to scan only when a file is modified, instead of default setting, which is to scan when a file is accessed or modified..
-VKalani
Would you like to reply?
Login or Register to post your comment.