Endpoint Protection

 View Only
  • 1.  Understanding the Scheduled Scan options in SEPM

    Posted Apr 01, 2013 06:57 PM

    I am getting conflicting views on Scan Duration options.

    How does the Scan for up to xx hours option work?

    If I configure my system to scan for 2 hours daily, does the scan start where it left the previous day

    or it will start from the beginning which effectively means it will be scanning the same data?

    If this has been addressed before, my apologies. One group of people say it will start from the beginning and I have come across some

    people who say it will continue from where it left the previous day. Which is Which?

     



  • 2.  RE: Understanding the Scheduled Scan options in SEPM
    Best Answer

    Posted Apr 01, 2013 07:34 PM

    Resumable scans will do this:

    Enabling resumable scans

    Article:TECH101386  |  Created: 2005-01-28  |  Updated: 2010-08-03  |  Article URL http://www.symantec.com/docs/TECH101386

     

    The "scan for up to" option only controls the time interval during which scans are randomized. So this will get you what you  want. You need to use a resumable scan but per the KB article above it can only be configured on the client side and not the SEPM as it is a registry change.

    For some additional reading on available scans, see this KB article:

    Managing scans on client computers

    Article:HOWTO80934  |  Created: 2012-10-24  |  Updated: 2013-01-30  |  Article URL http://www.symantec.com/docs/HOWTO80934

     



  • 3.  RE: Understanding the Scheduled Scan options in SEPM

    Posted Apr 01, 2013 11:02 PM

    It will start from where it left before otherwise the scan would never finish and it would be scaning same files for 2 hours and never complete.

    In Scan Schedule options, you may choose "Scan for up to N hours". If the scan has not completed by that time, it will resume at the next scheduled time or at a randomized time within that interval. The default scheduled scan that comes with Symantec Endpoint Protection is set to scan up to 2 hours and to resume at a random point in that time. Choose "Scan until finished" to run the scan without interruption.

     

    Symantec Endpoint Protection: Scheduled scan start is delayed, or scan progress stops or proceeds slowly

     

    http://www.symantec.com/business/support/index?page=content&id=TECH162202



  • 4.  RE: Understanding the Scheduled Scan options in SEPM

    Broadcom Employee
    Posted Apr 02, 2013 04:23 AM

    Hi,

    By default, scheduled scans run until the specified time interval expires and then resume when the client computer is idle. You can set the scan duration to Scan until finished.

    Refer these articles:

    Adjusting scans to increase protection on your client computers

    http://www.symantec.com/docs/HOWTO55307

    SEP 12.1 & Advanced Scanning

    https://www-secure.symantec.com/connect/articles/sep-121-and-advance-scanning



  • 5.  RE: Understanding the Scheduled Scan options in SEPM

    Broadcom Employee
    Posted Apr 10, 2013 05:11 AM

    Hi,

    Please update this thread, if issue is resolved then don't forget to mark your thread as 'SOLVED' with the answer that best helps you.



  • 6.  RE: Understanding the Scheduled Scan options in SEPM

    Posted Apr 12, 2013 06:29 PM

    Thanks everyone.  I am testing all the options provided but the big issue is HOW can one verify that the scan started in Point A and Stopped in Point B and then Resumed in Point C. The logs are not very helpful. Symantec should come up with clear scan logs