Endpoint Protection

 View Only
  • 1.  Symantec Endpoint Protection (version 11.0.5002.0) for WIN32BIT

    Posted Oct 14, 2010 05:16 AM

    I have SEP running on 2 x windows 2008 servers.

    I am wondering once the definitions are updated on the servers and it push out the definitions to clients, does it run a quick scan on clients? If yes, it is advisable to stop on the heavy loaded servers? and how?

    Also, what are the best practices to setup SEP on the servers running Veritas Cluster Services with Storage Foundation.

    Thanks,



  • 2.  RE: Symantec Endpoint Protection (version 11.0.5002.0) for WIN32BIT

    Posted Oct 14, 2010 05:20 AM

    it will run quick scan when news defs are loaded you can disable that; 

    for clusters follow this document

    http://communities.vmware.com/message/1497078



  • 3.  RE: Symantec Endpoint Protection (version 11.0.5002.0) for WIN32BIT

    Posted Oct 14, 2010 05:27 AM

    In order to turn off new definition scans do the following:

    1. Open the Symantec Endpoint Protection Manager.

    2. Select Policies from the far left.

    3. Highlight Antivirus and Antispyware under the View Policies section in the middle column.

    4. Highlight the active policy from the right side of the manager.

    5. Click Edit the Policy under the Tasks menu is the middle column.

    6. A new window will open.

    7. Select Administrator-defined Scans from the far left menu in the new window.

    8. Select the Advanced tab.

    9. From under Startup and Triggered Scans uncheck Run an active scan when new definitions arrive.



  • 4.  RE: Symantec Endpoint Protection (version 11.0.5002.0) for WIN32BIT

    Posted Oct 14, 2010 05:29 AM

    You can enable Definition Watcher scan..So whenever defs will load it will scan the common loadpoints and quarantine..However this can affect performance.



  • 5.  RE: Symantec Endpoint Protection (version 11.0.5002.0) for WIN32BIT
    Best Answer



  • 6.  RE: Symantec Endpoint Protection (version 11.0.5002.0) for WIN32BIT

    Broadcom Employee
    Posted Oct 14, 2010 05:36 AM

    I am wondering once the definitions are updated on the servers and it push out the definitions to clients, does it run a quick scan on clients?
    clients asks for the definition from SEPM. After the definition is downloaded a quick scan is triggered ( by default, you can remove this).
    If yes, it is advisable to stop on the heavy loaded servers? and how?
    Updates are incremental based on the revsions you keep it on SEPM.

     
     
    Also, what are the best practices to setup SEP on the servers running Veritas Cluster Services with Storage Foundation.