cancel
Showing results for 
Search instead for 
Did you mean: 

How to scan only archives ODS - VSE 8.8 patch 4

Hi,

We are using VSE 8.8 patch 4 on a Windows 2012 R2 server and the planified ODS take 2 days with the "inside archives scan" option set to ON with "low" performance. It's a MSSQL server with lot of JAR, WAR, ZIP files

When archive scan option is disabled,  the same planified ODS scan take only 2 hours !!!!

So, is there a way to planify a scan only for archives files ? Like that, we could have a scan without archives, and another scan with only archives, but not on same time.

Thank's for your help

2 Replies

Re: How to scan only archives ODS - VSE 8.8 patch 4

You can exclude folders or (VSE8.8p7 at least) you can change Scan Items to Specified file types and add the extensions you wish to scan separately in this case JAR, WAR, Zip etc.

It sounds like you will need 2 separate jobs for this.

E.g

Job 1 scan everything and untick 'scan inside archives'

Job 2 scan only extensions and leave scan inside archives enabled

tomz2
Level 11
Report Inappropriate Content
Message 3 of 3

Re: How to scan only archives ODS - VSE 8.8 patch 4

Hi Gustave69,

I would suggest reviewing the best practices for VSE, specifically page 27. It is not advised to scan archive files during an ODS scan unless absolutely necessary, for the reason you have described which is long scan times. Archives on their own, are benign, and it's when the contents of the archive are extracted could there be a malicious event occur. For that reason, it is recommended to scan archive files with OAS, but not ODS.

For reference - https://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/22000/PD22940/en_US/...