SEP - RVTSCAN Behaviour
RVTSCAN from what I understand is the real time scanning part of the SEP client. It will kick in when files are accessed or modified (although I think I have seen it run if you connect a USB drive)?
What happenes when a client downlaod a new def, does it do a high level scan of all files again or continue to work when files are in use. Seeing some servers that are highly utilising this process. Considering turning off protective threat protection (or whether this setting falls under)..