This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

on-write causes slow network cut/paste or move

I have a strange issue that is resolved by unchecking On-write under On-access scanning.

If you copy and paste a group of files from one network folder to another network folder (same server, folders may be side by side), it takes a few seconds.

If you cut and paste or move the same group of files from one network folder to another network folder, it takes 20 minutes.

If you uncheck On Write under On-access, the cut/paste or move zips by in a few seconds like copy/paste.

Please don't suggest I use a 3rd party copy tool.  This is only one symptom of the problem.  We see it in Allegro when they manage library files and it's all over the web in a variety of many other types software.

Sophos 10.0. 

Behavior isn't apparent on all machines.  I can't find a consistent pattern between the ones having an issue and those not having an issue.

I found nothing that raised a red flag in the Sophos log files and I looked through them all..

We ran wireshark on the client machine and saw no network issues.  It seems ilke Sophos is scanning the files up on the server from the client machine.  But that just doesn't seem possible....the server has it's own sophos client installed and should be handling this process.

Guess I should add that the resolution of unchecking Write is only a temporary solution as it is company policy to have this checked and when the client reboots their machine, policy will just re-check the setting.

:43048


This thread was automatically locked due to age.
  • I also found you can leave Write checked if you go add "All remote files" to the Exclude item list.  Network guys are saying that is not a good option for us. 

    Is this behavior by-design?   

    :43050
  • Hi,

    I  would start with a Process Monitor log of the operation when seeing the problem.

    If you enabled the "Duration" column that should tell you where all the time is going interms of single operations.

    Feel free to zip and attach a PML file to the case and I'll have a look if it's not obvious.  I would avoid filtering too much at this stage.

    Regards,

    Jak

    :43085