Messaging Gateway

Hi,

As per what Symantec official arcticles and admin guide says.

Bloodhound heuristics involve a trade-off between higher virus-detection rates and the speed with which Symantec Brightmail Gateway processes mail. Lower heuristic levels may miss more viruses but require less processing power. Higher heuristic levels may catch more viruses but consume more processing power.

What is the risk of trying to change the level from meduim to high?

If it is only about CPU/Memory +  some additional latency seconds that's fine since we are only using about 10% of CPU.

Does any one have an experience of changing that level from default (meduim) to high?

Is there any risk of getting higher level of false positives ?

Please share thoughts

Hi,

We use medium too, havent tried high. So cant say if there's high potential of false positives.

But i experienced the best result using rapid release.

Regards

Thomas

Thanks Thomas, Anyone from Symantec Team to confirm?

it's really disappointing that none from Symantec team is active here..

Rapid Release is the best way to catch the most malware since we release those definitions multiple times per day as we see new threats emerging.