working set high when scan

[sakurai_tabi]

Here we using VSE 8.8 Patch 7, Windows 2008 R2 SP1, During scan the working set of some process jump up and never return

back to OS.

Any idea ?

[catdaddy]

Moved from Support Forums to VirusScan Enterprise >Discussions

For better exposure and assistance.

[sakurai_tabi]

anyone can help ?

[tao]

Take a look at McAfee Profiler ; should help in dialing in OAS/ODS scanning:

McAfee Profiler captures top processes and files that are accessed by the VirusScan Enterprise (VSE) On-Access Scanner (OAS). Based on the data collected, an administrator can choose files or processes to exclude from scanning to lessen the impact on the system.

[sakurai_tabi]

so instead of exclude. this is normal situation during scan ?

[tao]

It's possible, yet too many variables to consider. McAfee Profiler may help dial in what is actually being scanned AND more importantly - what shouldn't be scanned (which is all govern by your environment culture and scanning/regulatory policies).

Every environment is different yet here's a good starting point for AV exclusions: McAfee Corporate KB - Consolidated list of Endpoint Security/VirusScan Enterprise exclusion articles...

[sakurai_tabi]

wondering if somebody are loging in the server, will it also cause scanning to use more memory to scan the login sessions??

i.e. explorer.exe, winlogon.exe ......??

[tao]

Login session may be scanned and then stop; to my knowledge it shouldn't continue to scan.  With that said, this is all dependent on the login user isn't performing an action to trigger an "OAS" to happen (such as: install, server re-config, software monitoring ... and so on).

[mcnewidea]

Only increase the consumption of resources during the scan, should return to normal after finishing the scan, you should verify that the scan time is once a week and that it is an hour, better if it is at lunch time.

[sakurai_tabi]

mostly idle session on weekend