VSE OAS Scanner - Enable or Disable 'When reading from disk'?

[Nick_B]

Hi folks,

In McAfee KB 85136, titled "Product Management Statement for On-Access Scan configuration in VirusScan Enterprise 8.8" it is not recommended to disable the option "When reading from disk" in the VSE OAS policy. It does not state whether this applies to Low or High Risk however.

In McAfee KB 58692, titled "How to create Low-Risk and High-Risk process exclusions in VirusScan Enterprise", a note near the bottom of the article states it is generally sufficient to disable "When reading from disk".

Could someone provide clarification on this much-debated topic, please?

Thanks,

Nick

[tlange · Accepted solution]

For default and high risk profiles, "When reading from Disk" should be enabled.  for low risk it is best to disable "when reading from disk".  

[Nick_B]

Thanks!