This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Improving Performance with On-access exclusions

I am in the process of evaluating Sophos as an anti-virus solution for our customers and my main issue is one of peformance.

I have a test web application which, with AV on-access scanning off, takes about 7 seconds to run. When it's on, it takes about 22 seconds.

I decided to find out what was being scanned that took all the time. To cut a long story short, I excluded everything from the on access scan - all drives, memory, adware etc and it made no difference.

What is Sophos scanning that I can't exclude?

This thread was automatically locked due to age.

0 jak over 13 years ago

What about suspicious behaviour? How does it perform with that off?

I assume this is the server side part of the system rather than the client?

Regards,

Jak
:24733
Cancel
Vote Up 0 Vote Down

Cancel
0 JHoots over 13 years ago

Sorry Jak, I should have said that this is on a client PC, not the server.
:24757
Cancel
Vote Up 0 Vote Down

Cancel
0 JHoots over 13 years ago

I am not scanning for suspicious behaviour.
:24759
Cancel
Vote Up 0 Vote Down

Cancel
0 JHoots over 13 years ago

I think that the reason that switching off on-access scanning is helping performance is that the download scanning in the web protection configuration is set to "as on-access". If I setdownload scanning to off, it has the same effect as switching off on access scanning.
Note that seting download scanning to on shows the same poor performance.
:24761
Cancel
Vote Up 0 Vote Down

Cancel
0 jak over 13 years ago

What happens if you Authorize the IP of the server?

You can do this from SEC or locally at the client (Configure - Authorization).

Regards,

Jak
:24771
Cancel
Vote Up 0 Vote Down

Cancel
0 JHoots over 13 years ago

Hi Jak,
Yes, that's one of two things I have found that help. The other is to switch off the "block access to malicious websites" feature. The application makes lots of round trips to the web server and each time the web server address appears to be validated if this feature is switched on.
:24783
Cancel
Vote Up 0 Vote Down

Cancel