Endpoint Protection

Is there any way to disable the automatic first full scan that takes place after the Endpoint client has been installed? We deploy the clients to freshly installed machines with all updates so the likelyhood of them being infected is minimal. Ideally, we would like for the machines to be ready to use as soon as possible.

Cheers,
Rickard

No If  the client joins a group which has scheduled scan in the policy then it will scan after installation and joining the group. as soon as the policy from sepm is applied to the client it will scan as it will think that it has missed the previous scheduled scan.

so if you want not to scan while installation then create a separate group with no scheduled scan in the policy and all create the package to join that new group after installation.  Later you can move the client to your main group with scheduled scan.

hi, while creating a package use the AV /AS policy which does not have a scan enabled

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007120615243648

Unfortunately it is not possible to stop the initial scan when SEP is installed.

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008060513055048

It is not possible yet.
May be a future enhancement

Check this link.
https://www-secure.symantec.com/connect/idea/option-disable-full-scan-runs-after-sep-client-installed

Rickard, in this case you can cancel the scan process by task manager.

Hello Rickard Andersson.
When you install SEP to new client, sep manager said "you missed a schudeled scan" thats why it start immediately.
In the sep manager edit your antivirus and antispy policy > Administarator-defined Scans> Schedule>  uncheck Retry the scan within 3 days
therefore scan will not start when you install new machine.
Thanks.
Fatih.

Thanks. I guess I'll wait for a future update that includes this feature then.

I have tested it this can be done with no schedule scan policy.