Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Downloaded Files

The on-access scanner really seems like overkill for my needs.  For example, why do I need to scan a bunch of files I access every day?  I really only want to scan files that I download.  Is there a way to scan ONLY a single folder, like Downloaded, and exclude the rest of my Mac?

Additionally, Custom Scans work fine, but I can't find any kind of scheduling feature.  I would rather scans run in the middle of the night, while no one is using the computer to notice any slowdown.  How do I set this up?

Thanks!

:1003991


This thread was automatically locked due to age.
Parents
  • Setting up a crontab is easy enough, and a folder action is a good idea.  I'm curious then - what happens when I turn off the On-Access Scanning?  I imagine that On-Access Scanning works via some kind of kernel hook that activates when a file is accessed.  If the On-Access Scanning is turned off, then is the hook uninstalled / disabled completely (as if Sophos was not there), or is it still running some code every time a file is opened (and then checking a config param, and deciding not to run the scanner)?

    Additionally, is there any kind of performance information available on speed of the on-access scanner?  I'd like to know the difference between fopen performance in the following scenarios:

    * scanner used

    * scanner turned off

    * Sophos not installed at all

    I would guess you guys are running these kinds of tests now; what're the results like?

    Thanks!

    :1004015
Reply
  • Setting up a crontab is easy enough, and a folder action is a good idea.  I'm curious then - what happens when I turn off the On-Access Scanning?  I imagine that On-Access Scanning works via some kind of kernel hook that activates when a file is accessed.  If the On-Access Scanning is turned off, then is the hook uninstalled / disabled completely (as if Sophos was not there), or is it still running some code every time a file is opened (and then checking a config param, and deciding not to run the scanner)?

    Additionally, is there any kind of performance information available on speed of the on-access scanner?  I'd like to know the difference between fopen performance in the following scenarios:

    * scanner used

    * scanner turned off

    * Sophos not installed at all

    I would guess you guys are running these kinds of tests now; what're the results like?

    Thanks!

    :1004015
Children
No Data