cancel
Showing results for 
Search instead for 
Did you mean: 

ENS ODS during idle

Jump to solution

Hello. We use custom On-Demand scanning configured to scan once a week. We are also using the "Scan only when the system is idle" option to reduce the CPU load while the user is working on their system. As you know, due to this feature the scan pauses and resumes based on user activitiy. The problem I'm seeing with laptops where the user is constantly working and the scan is constantly pausing and resuming through the day. In some instances the scan never completes because the user is working through out the day and then shuts down and leaves for the day taking the laptop with them. This is espeacially true for users that have a laptop as their primary system. So a scan starts but may never finish because it has trouble finding "idle" time.

Just wondering if other folks are dealing with this and how they get around it.

1 Solution

Accepted Solutions
McAfee Employee jess_arman
McAfee Employee
Report Inappropriate Content
Message 2 of 2

Re: ENS ODS during idle

Jump to solution

@asif.shah In these instances most are disabling the "scan only when idle" feature, and gaining some performance back by disabling scanning of archives and setting system resource utilization to low. 
    This is considered to be a very minor to non-existent security risk because all files inside an archive are scanned when the archive is opened or extracted, making scanning these files redundant, because OAS will scan the archive if it is accessed or opened at any time and scanning them during an ODS can take some time. This extended time to scan the large archive files prevents Microsoft's priority allocation for resources from handing the processing power to other processes that request it until the entire archive is scanned. If there is a large number of archives on a system, this scenario is more frequent and can create significant impact to performance and scan duration. 

   We recommend that you look towards these config changes to assist in lessening the impact of the ODS. However, as described, high CPU during ODS is expected by design, and there is not much that can be done to make a dramatic difference in scanning. Please review the following articles that go further in depth in regards to these concepts:
KB55145
KB85299

    You can also review the best practices documentation for optimum ODS configuration: KB74059

 

Was my reply helpful?

If this information was helpful in any way, or answered your question, will you please select "Accept as Solution" in my reply, or give kudos as appropriate, so together we can help other members?

1 Reply
McAfee Employee jess_arman
McAfee Employee
Report Inappropriate Content
Message 2 of 2

Re: ENS ODS during idle

Jump to solution

@asif.shah In these instances most are disabling the "scan only when idle" feature, and gaining some performance back by disabling scanning of archives and setting system resource utilization to low. 
    This is considered to be a very minor to non-existent security risk because all files inside an archive are scanned when the archive is opened or extracted, making scanning these files redundant, because OAS will scan the archive if it is accessed or opened at any time and scanning them during an ODS can take some time. This extended time to scan the large archive files prevents Microsoft's priority allocation for resources from handing the processing power to other processes that request it until the entire archive is scanned. If there is a large number of archives on a system, this scenario is more frequent and can create significant impact to performance and scan duration. 

   We recommend that you look towards these config changes to assist in lessening the impact of the ODS. However, as described, high CPU during ODS is expected by design, and there is not much that can be done to make a dramatic difference in scanning. Please review the following articles that go further in depth in regards to these concepts:
KB55145
KB85299

    You can also review the best practices documentation for optimum ODS configuration: KB74059

 

Was my reply helpful?

If this information was helpful in any way, or answered your question, will you please select "Accept as Solution" in my reply, or give kudos as appropriate, so together we can help other members?

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community