Data Center Security

Hi all,

I'm testing DCS on some web servers. I've configured alerts on UMC to send me email for file watch activities. But, got some alerts as follows:

Event Type: Detection Error
Description: FWC_0023:  File too big to perform diff (135 Kb > 100 Kb limit): c:\inetbub\...

I searched for all settings in UMC and server console but, didn't get any configuration related this. So, my question is that, is there any way to change file size limit for comparision? If it is possible, what is the recommended max file size limit?

Any help would be appreciated. Thanks!

Hi,

Might not necessarily be the same, but it might point you in the right direction:

https://www.symantec.com/connect/forums/scsp-file-too-big-perform-diff-163-kb-100-kb-limit

Thanks!

Thanks for reply.

Yes, I've seen this thread before. But, I also want to know about;

• It is written in thread the FileDiff can be adjusted size by editing the localagent.ini file and it must be done on every agent. Good point. But I'have a lot of agent, so I'm curious about if there is a way to change this limit centrally on UMC or server console.
• What is the recommended file size limit? Is there a guide, recommendation for this or it only depends on files I watched?

Any help would be welcome. Thanks!