Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 11 replies
  • Subscribers 1 subscriber
  • Views 10290 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Best practice for On-Access scan settings

Sophos_User

Hello,

I know by default that the On-Access scan settings for Viruses/spyware is set to "Deny access only" but I wanted to get a feel for what others are doing and why?

We are using the defaul setting for On-Access and then in our weekly scan schedule we set the Automatically clean up.  But it seems that when machiens are offline during the weekly scan schedule that they are never getting cleaned unless we manually clean them from the console during the day.

Thoughts about why we should not just set the On-Access scan to automatically clean?

Does anybody know what the defaults are for other AV prodcuts?

:2647


This thread was automatically locked due to age.
Parents
  • 0

    But it seems that when machiens are offline during the weekly scan schedule that they are never getting cleaned unless we manually clean them from the console during the day.

    Right, that's exactly the problem everybody faces. Unless you implement a forced Scheduled Scan using WOL it will always be a manual job to clean the PC from malware. And this involves having luck that the PC is in use the minute you look at it....

    I personally have the On-Access scanner delete Virus'. Scheduled scans are set to cleanup and delete Virus _and_ Adware and in especially nasty malware cases I also delete suspicious files. No exceptions. If OS ecosystem or apps get corrupted due to suspicious file false positives, the machine has to be re-imaged by my technicians. HIPS is running in Alert only mode.

    :2648
Reply
  • 0

    But it seems that when machiens are offline during the weekly scan schedule that they are never getting cleaned unless we manually clean them from the console during the day.

    Right, that's exactly the problem everybody faces. Unless you implement a forced Scheduled Scan using WOL it will always be a manual job to clean the PC from malware. And this involves having luck that the PC is in use the minute you look at it....

    I personally have the On-Access scanner delete Virus'. Scheduled scans are set to cleanup and delete Virus _and_ Adware and in especially nasty malware cases I also delete suspicious files. No exceptions. If OS ecosystem or apps get corrupted due to suspicious file false positives, the machine has to be re-imaged by my technicians. HIPS is running in Alert only mode.

    :2648
Children
No Data