Video Screencast Help
Give us your opinion and win with Symantec! Please help us by taking this survey to tell us about your experience with Symantec Connect, so that we can continue to grow and improve.  Take the survey.

Policy settings wanted in SEP to enable a full scan to run when a PC is idle

Created: 23 Nov 2009 • Updated: 04 Feb 2013 | 8 comments
BobJ's picture
17 Agree
0 Disagree
+17 17 Votes
Login to vote
Status: Implemented

Add to SEP an option in the policies to SCAN when idle (feature is already available in Norton Internet Security). Would run a full scan on the PC if no user activity for a administrator defined period of time (default = 5 minutes).

Scan pauses when user activity resumes and will then continue when idle again.
Scan will run if no user logged in.

On shutdown scan exits gracefully. Ideally would re-start where it finished last time.

Also needs to know when last full scan completed (otherwsie would start a new one after finishing a scan. Check box or value for number of days since previous full scan last completed (and this should include any scheduled scan). Default of (say) 3 days.

Comments 8 CommentsJump to latest comment

AL76's picture

We are exploring various possibility of reducing the effect of scanning, and have some ideas to be considered. For example,

  1. If this is a known OS file and hash has not been change, possible to skip scanning
  2. If CPU is idle, throttle the scan speed to reduce resource utilisation

Currently we already have feature to thottle between application response and scanning speed, and include caching of files to reduce rescanning.


Alan Lee

Sr Manager, Regional Product Management, APJ

Enterprise Security, Mobility & Management

0
Login to vote
JimW's picture

This feature is under development and is being targeted for a release next year.

Jim Waggoner Director Product Management, Symantec Endpoint Protection, Enterprise Security Group, Symantec

0
Login to vote
Hooman's picture

Hello,

Could you please tell me when this option is going to be available? Full Scan is freezing the computers when is running and to be honest SEP is acting as virus itself.

I appreciate for letting me know.

Regards,

Hooman Afkhami
Systems Architect

Bombardier Aerospace

0
Login to vote
AL76's picture

Hooman, as mentioned by Jim, is being targeted for release next year.

Meanwhile there are a few things you can try to improve


  1. Schedule scan on non peak hour
  2. Use throttle to be for Best Application Peformance or Balance Performance
  3. Purge Internet Explorer temporary folder
  4. Defrag hard drive

Contact Tech Support if you have tried all these improvments but still not helping, you would be adviced to enable debugging to provide logs for further troubleshooting.

Alan Lee

Sr Manager, Regional Product Management, APJ

Enterprise Security, Mobility & Management

0
Login to vote
Hooman's picture

Hello Alan,

Thanks for the quick respond. We have done number two. I have to come up with a solution proposal this week.

Number 2 is in at the moment so I am including Number 1, 3, and 4. Is there any other points?

What is the command option equall to full scan. I am also proposing running the full scan with command line in scheduled task since we could have idle option.

Also do have an approximate date of the option to be available?

I already contacted our tech support but he is on vacation till Aug.

Thanks and regards,

Hooman

0
Login to vote
AL76's picture

Hooman,
You can request for another Tech Support personnel to support you. Meanwhile test it out with 1, 3 and 4 to see if it's helps.

You can explore the doscan.exe utility and use Task Scheduler to schedule a full scan.

Alan Lee

Sr Manager, Regional Product Management, APJ

Enterprise Security, Mobility & Management

0
Login to vote
Elisha's picture

This was implemented in SEP 12.1.

0
Login to vote