Video Screencast Help

SEP - RVTSCAN Behaviour

Created: 15 Feb 2011 | 3 comments

Me again!

RVTSCAN from what I understand is the real time scanning part of the SEP client. It will kick in when files are accessed or modified (although I think I have seen it run if you connect a USB drive)?

What happenes when a client downlaod a new def, does it do a high level scan of all files again or continue to work when files are in use. Seeing some servers that are highly utilising this process. Considering turning off protective threat protection (or whether this setting falls under)..

Thanks

Discussion Filed Under:

Comments 3 CommentsJump to latest comment

pete_4u2002's picture

When the new definition is downloaded on the machine , if configured it will scan the places where threats are common active as soon new definition comes in. Also the files will be scanned (autoprotect ) with the latest definition.

Vikram Kumar-SAV to SEP's picture

Rtvscan.exe is the Main process of SEP AVnot just for File System Auto Protect. You need to turn off . Defwatch Scan ( Quick Scan when new definitions arrive) and Startup Scan for better performance.

Its in SEPM-Policy-AV Policy-Admin Scans-Advanced

Vikram Kumar

Symantec Consultant

The most helpful part of entire Symantec connect is the Search button..do use it.

Davinci_uk's picture

Vikram that is great to know - thank you both.