Endpoint Protection

 View Only
  • 1.  strange scan log behavior

    Posted Aug 09, 2012 03:53 PM

    I have a single SEPM 12 server (upgraded from SEP 11) with around 700 clients. I have weekly schedule scan for one particular group. One strange behavior is that the scan in the client machine doesn't show the schedule scan. If I logon to the SEPM server and check the scan log from there, I can see the schedule scan entry. Why? The second strange part is, among the schedule scan log entries, some entries for some clients show start but no completion time. Some entries for some clients show all scan completed, but only certain entries scan all the files in the file system while other only scan a small portion with the completed status. Why?

    Thanks in advance.

     



  • 2.  RE: strange scan log behavior

    Posted Aug 09, 2012 04:11 PM

    Pretty sure it's all just cosmetic issues. I generally see this during our weekly scans as well.



  • 3.  RE: strange scan log behavior

    Posted Aug 09, 2012 04:21 PM

    Does it mean there is no way we can tell how long and how much files does the schedule scan did?



  • 4.  RE: strange scan log behavior

    Posted Aug 09, 2012 04:25 PM

    If it's showing incorrectly, I would assume no. I never have.

    Perhaps, someone else on here has other input though to suggest otherwise.

    This happen for all clients in that group?



  • 5.  RE: strange scan log behavior

    Posted Aug 09, 2012 05:39 PM

    I haven't check all the clients, but the one that I checked always has only a small number of files scanned by the weekly schedule scan.



  • 6.  RE: strange scan log behavior

    Posted Aug 09, 2012 05:46 PM

    Do they reboot the machine to stop the scan?



  • 7.  RE: strange scan log behavior

    Posted Aug 10, 2012 09:38 AM

    Actually, I noticed the scan stuck on one file, so we will just do an exception on it and see how it goes. But I still have the problem with only a small amount of files being scan on most of the client.