what is the version?

do you find it a very specific time, like more connection,scan, definition update?

beside that high I/O do you observe in the same time higher CPU or Memory usage from any other SEP processes?

And how does it look like with the network traffic from and to this machine? do you see any extraordinary big traffic between this client and SEPM?

Any chance you could check if the issue occurs after client update to the newest SEP 12.1 RU2?

is this on VM machine?

Hello,

Could you please let us know the OS on which you are facing the high I/O??

How much Ram does the machines carry on themselves??

Are these clients virtual machines??

Could you try disabling startup scan, active scan when new definitions arrive, network files scan, to minimize the SEP effect on PC performance.

1. Disable startup scan and active scan when new definitions arrive, go to Virus and Spyware Protection policy-->Administrator-Defined Scans-->Advanced.

2.Disable network files scan,go to Virus and Spyware Protection policy-->Auto-Protect-->Scan details-->Network settings

3.Disable file cache or disable rescan cache when new definitions load,go to Virus and Spyware Protection policy-->Auto-Protect-->Advanced-->file cache

Hope that helps!!

What's the i/o reading you got for smc.exe?

Hi

Please upgrade to SEP 12.1.2

Regards