4 Replies Latest reply on May 11, 2013 11:42 PM by czql5v

    On Access/Realtime

    czql5v

      Hi All,

       

      I am getting a little confused regarding scanning and need some clarification. Please could someone help.

       

      Please could someone tell me the difference between on-access/realtime and on-demand/scheduled scans, and more importantly do they both work simutainuoulsy? For example. If our organisation did not set up any policies to scan for infections I believe there is an in built McAfee default scan which must kick in every time a read or write occurs on the system.

       

      Any clarification would be extremely helpful.

       

      Thanks in anticipation.

       

      Regards.

        • 1. Re: On Access/Realtime
          Attila Polinger

          Hi,

           

          generally speaking the "on-access" scan is a realtime mechanism that triggers when any request fo accessing a file is issued by a user or other program to the operating system. This mechanism ensures that the file is scanned for harmful content before the response to the file access request would be returned to the caller.

          The "on-demand" (~ "when you want") scan is always "human intent" initiated and does not trigger on every request for file access.

           

          In other words as soon as Virusscan is installed and operational, a watchdog mechanism starts monitoring file access requests (on-access). Other than that, VirusScan administrator can launch (or schedule for running) on-demand scans. On-demand scans are helpful for example when you first want to scan the entire drive right after VSE has installed, or schedule on-demand scans to examine areas of disk that are excluded for some reason from on-access scanning.

           

          Attila

          • 2. Re: On Access/Realtime
            czql5v

            Hi Attila,

             

            First off the bat, thanks very much for explaining the process. It's very much appreciated.

             

            I have just one further question. Am I to assume that the "on-access" is never switched off and even cannot be switched off as it is a mechanism within the VSE application....?

             

            I now understand the differences and thank you very much for sharing that with me.

             

            Regards.

            • 3. Re: On Access/Realtime
              Tristan

              It is possible to 'switch off' the on-access scanner if a user wanted to.

               

              1. Disable the task in the VirusScan Console

              2. Stop the Mcafee service

              3. By exclusions

               

              All of these can be mitigated by carefully configuring your policies in ePO. For example locking down the VirusScan user interface with a password.

              • 4. Re: On Access/Realtime
                czql5v

                Hi Tristan, et al,

                 

                Thank you very much for taking the time to post. Your replys have helped me understand these two process.

                 

                Thanks.