Video Screencast Help

Understanding the Scheduled Scan options in SEPM

Created: 01 Apr 2013 • Updated: 12 Apr 2013 | 5 comments
jsn's picture
This issue has been solved. See solution.

I am getting conflicting views on Scan Duration options.

How does the Scan for up to xx hours option work?

If I configure my system to scan for 2 hours daily, does the scan start where it left the previous day

or it will start from the beginning which effectively means it will be scanning the same data?

If this has been addressed before, my apologies. One group of people say it will start from the beginning and I have come across some

people who say it will continue from where it left the previous day. Which is Which?

 

Operating Systems:

Comments 5 CommentsJump to latest comment

.Brian's picture

Resumable scans will do this:

Enabling resumable scans

Article:TECH101386  |  Created: 2005-01-28  |  Updated: 2010-08-03  |  Article URL http://www.symantec.com/docs/TECH101386

 

The "scan for up to" option only controls the time interval during which scans are randomized. So this will get you what you  want. You need to use a resumable scan but per the KB article above it can only be configured on the client side and not the SEPM as it is a registry change.

For some additional reading on available scans, see this KB article:

Managing scans on client computers

Article:HOWTO80934  |  Created: 2012-10-24  |  Updated: 2013-01-30  |  Article URL http://www.symantec.com/docs/HOWTO80934

 

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

SOLUTION
Rafeeq's picture

It will start from where it left before otherwise the scan would never finish and it would be scaning same files for 2 hours and never complete.

In Scan Schedule options, you may choose "Scan for up to N hours". If the scan has not completed by that time, it will resume at the next scheduled time or at a randomized time within that interval. The default scheduled scan that comes with Symantec Endpoint Protection is set to scan up to 2 hours and to resume at a random point in that time. Choose "Scan until finished" to run the scan without interruption.

 

Symantec Endpoint Protection: Scheduled scan start is delayed, or scan progress stops or proceeds slowly

 

http://www.symantec.com/business/support/index?pag...

Chetan Savade's picture

Hi,

By default, scheduled scans run until the specified time interval expires and then resume when the client computer is idle. You can set the scan duration to Scan until finished.

Refer these articles:

Adjusting scans to increase protection on your client computers

http://www.symantec.com/docs/HOWTO55307

SEP 12.1 & Advanced Scanning

https://www-secure.symantec.com/connect/articles/s...

Chetan Savade
Sr Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

Chetan Savade's picture

Hi,

Please update this thread, if issue is resolved then don't forget to mark your thread as 'SOLVED' with the answer that best helps you.

Chetan Savade
Sr Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

jsn's picture

Thanks everyone.  I am testing all the options provided but the big issue is HOW can one verify that the scan started in Point A and Stopped in Point B and then Resumed in Point C. The logs are not very helpful. Symantec should come up with clear scan logs