Endpoint Protection

 View Only
  • 1.  Clarification on the Retry Scan interval under Schedule for Administrator Defined Scans

    Posted Jul 30, 2009 10:05 AM
    Just for some sanity, can someone explain to me the expected behavior to the "Retry Scan Interval" under the Schedule tab for an "Administrator Defined Scan" job?

    I have a Saturday scan scheduled for laptop users, with a retry scan interval of 1 day.  When the laptops are off during the weekend, they bring it back into work on Monday morning.  When they boot up, the machine begins to scan.

    I would expect it would not scan because it is outside the 1 day retry interval.

    So what is different.

    We use location specific settings, with a shared AV policy.  One location for on the Corporate Network, one Location for Off the Corporate Network.

    The biggest difference is the firewall and liveupdate policies.

    I have also seen mixed results when a machine is rebooted during a scan.  I've been told this should cancel the scan and it will not restart.  Sometimes this is true, sometimes it is not.

    What qualifies as a "Missed Event"?   How are these recorded and acted upon?




  • 2.  RE: Clarification on the Retry Scan interval under Schedule for Administrator Defined Scans

    Posted Jul 30, 2009 10:15 AM
    I see that

    You can enable and then set the maximum number of days to wait before trying the scan.



  • 3.  RE: Clarification on the Retry Scan interval under Schedule for Administrator Defined Scans

    Posted Jul 30, 2009 10:29 AM
    ..."retry scan interval" of 1 leads to the client trying to execute the admin defined scan again one day after the set date.
    If it is not able to do it one day later, I am not really sure, how the client acts. I think a symantec support technician told me something about a kind of randomization, but I am not really sure about that. Also I do not know how often the client retries the scan.

    A "missed event" is for example, if the client is running on battery or is offline.

    best regards

    Dominik


  • 4.  RE: Clarification on the Retry Scan interval under Schedule for Administrator Defined Scans

    Posted Aug 14, 2009 04:26 PM
    It says retry within

    So I interpret that as if you miss the scan you have until X to get it done, else forget about it.

    So retry of 1 day, means you have 1 day to get the scan done if you miss it, or else wait for the next schedule scan.

    Unfortunately, this doesn't seem to be consistent for us.


  • 5.  RE: Clarification on the Retry Scan interval under Schedule for Administrator Defined Scans

    Posted Aug 14, 2009 04:51 PM
    If you are seeing unidentified scans,

    you might want to open a case with Symantec and ask for the "SymRmvScan" Utility.

    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008070711521548


  • 6.  RE: Clarification on the Retry Scan interval under Schedule for Administrator Defined Scans

    Posted Sep 08, 2009 01:08 PM
    I have a folder full of tools.  I have a ticket open already. 

    Thanks,

    Toko