This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Full System Scan ? Why needed, Strategies?

I administer a fairly new installation of SAV 9 on ~7000 XP computers in over 100 locations, using SEC 4

I have on-going complaints about full system scan causing computers to be unusable, during the scan.

Sophos support admits it's a resource hog.

I tried scheduling it for different times, days etc. but there's always somebody who needs their computer at that time.

Management is questioning why the Full Scan is even needed.

Sophos Support tells me it's necessary because the on-acess methods do not check all file types, and if they were configured to do so there would be performance issues.

How are others handling this challenge? Should I make a case that we must mandate it?

:3935


This thread was automatically locked due to age.
Parents
  • Sennister,  Are you using AD synchronization and if so how do you move them out of their AD group in Sophos.  We use the same stragey in McAfee but with the AD synch in Sophos I cannot do this.  I get blocked when I try to move them to a "Locked Down group".

    Ruckus, While I have not established my scheduled scans I understand the purpose of them would be that scheduled scan allow cleanup on PUP's and Adware where one time scans from the console on a target machine do not.  I did find that locally configured scans allow access to the advanced>clean up field.

    Interestingly my end user have not complained about AV scans and they seem to complete on  Dell XP SP3 machine (mid to high range components) in well under an hour.  Are you scanning read and write from the on access component.  I am assumming that the scheduled scan pulls r/w parameters from the on access scanner settings as that field does not present itself in the 4.0 console.

    :4031
Reply
  • Sennister,  Are you using AD synchronization and if so how do you move them out of their AD group in Sophos.  We use the same stragey in McAfee but with the AD synch in Sophos I cannot do this.  I get blocked when I try to move them to a "Locked Down group".

    Ruckus, While I have not established my scheduled scans I understand the purpose of them would be that scheduled scan allow cleanup on PUP's and Adware where one time scans from the console on a target machine do not.  I did find that locally configured scans allow access to the advanced>clean up field.

    Interestingly my end user have not complained about AV scans and they seem to complete on  Dell XP SP3 machine (mid to high range components) in well under an hour.  Are you scanning read and write from the on access component.  I am assumming that the scheduled scan pulls r/w parameters from the on access scanner settings as that field does not present itself in the 4.0 console.

    :4031
Children
No Data