3 Replies Latest reply on May 2, 2013 12:49 PM by lcfitz2

    On Access Scanner Activity Log

      Hi, I work for a company that uses EPO 4.6.6 and we have Virus Scan Enterprise 8.8.

       

      We have a great many users who feel that any time anything is going wrong with any application on  their system that its because the anti-virus is blocking it, or using too many resources scanning, or what have you.

       

      I want to know if there is a way for me to see what processes the On Access Scanner is scanning, or has scanned.  I know we can add exceptions for applications but we would prefer to not add an exception even for a "safe" application unless we know that it has to be done, 

       

      Does anyone know of anything that would help me do that? The only thing I can think of would be to add the exception test with the user and see if symptoms improve but this isnt an option due to company policy.

       

      Any help is greatly appreciated.

        • 1. Re: On Access Scanner Activity Log
          alexn

          Hi

           

          On each DAT update VSE flushes its cache and start sacnning all accessed files. In your case what I will suggest you to see Access protection log of machine in question and note the processess which are blocked and the rule which is blocking them, make a list and then apply the exclusion on that single machine.

          I belive this would really increase performance and application issue as well and later on you may apply the exclusions on all machines.

           

          Further you can also set Low and high process policies as well. and put your application's process in low risk. Inthis way they will be scanned but with trusted level  and this would not breach your company policy and obviously performance will be improved.

          1 of 1 people found this helpful
          • 2. Re: On Access Scanner Activity Log
            petersimmons

            https://kc.mcafee.com/corporate/index?page=content&id=KB69683&actp=search&viewlo cale=en_US&searchid=1366434260639

             

            Go get the McAfee Profiler.

             

            Users are trained to assume security is always at fault. It will take time to educate them that 95% of the time, that isn't the case.

            • 3. Re: On Access Scanner Activity Log

              I know its been a while but Id like to thank both of you, Alex's method helped with another issue and the profiler has helped me with two other people already. The original person though hasnt gotten back to me because they believe they are "having trouble getting it to read correctly". Which I honestly think is because Mcafee isnt causing the issue within their ancient applications and he cant get the profiler to indicate that. I could be wrong though.

               

              But really this profiler will be extremely useful going forward, and the process for creating exceptions and setting priorities helps when/if we do have to create the exception.