Symantec AV - MS Exchange Auto-Protect is it necessary?

Posted on 2007-10-17
Last Modified: 2013-12-09
We are running Symantec AV Corp 10.1 on all workstations. As you already know they have the option for "Microsoft Exchange Auto-Protect" and I was curious to see if we should be leaving them on or taking them off.

We are running MS Exchange 2003 Enterprise. We also have an IronPort C100 filtering content, SPAM, etc. thus I wanted to see if it is still necessary to enable the MS Exchange Auto-Protect on Symantec AV.
Question by:RTM2007
    LVL 38

    Expert Comment

    by:Hypercat (Deb)
    My theory about this is that more protection is always better. I have anti-virus, anti-malware and anti-spam scanning going on at the network level, also, but I always turn on the autoprotect for email on the workstations on all networks that I manage. Is the IronPort device scanning for viruses as well as spam and content?  If not, you definitely need some level of antivirus protection for email.  And what if something goes wrong with the IronPort device? Do you have a specific and good reason for NOT turning on the SAV autoprotect for email?
    LVL 2

    Author Comment

    Mainly just the resources pulled from AV on the workstation, in addition to not knowing if it "interferes" as it does with the server version (ex. OMITTING Exchange database files from the AV engine (exclude).
    LVL 38

    Accepted Solution

    The engine that runs autoprotect for emails (RTVScan.exe) is the same engine as the one that runs autoprotect for files.  So, once you have autoprotect turned on at all, you may as well have it turned on for emails as well as files. It does not use any more (or less) resources on the workstation.  The same applies for files/folders on the workstation that need to be excluded from scanning.  Moreover, it's the file scanning function of autoprotect that can cause problems, not the email scanning function.  I certainly hope you have the file scanning turned on, since if you don't then the application isn't doing a thing for you and might as well not be installed. The only files/folders on workstations that I've ever found to be affected by AV scanning is the spool folder, which I do exclude from the autoprotect scanning.  If you are using SAVCE and you know how to configure it properly using the Symantec System Center, then it's not difficult at all to set these parameters for all of the workstations on your network.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Better Security Awareness With Threat Intelligence

    See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

    Suggested Solutions

    PREFACE The purpose of this guide is to explain how to manually move a SEP client to a different client group by performing steps on the client-side. These steps may prove particularly useful because they allow the client to move after it has alrea…
    By the time you finish reading this article, you may have already lost all your money because you don't know the simple steps to securing your BitCoin wallet. BitCoin is an incredible invention. It is a decentralized currency system, which is the…
    Need more eyes on your posted question? Go ahead and follow the quick steps in this video to learn how to Request Attention to your question. *Log into your Experts Exchange account *Find the question you want to Request Attention for *Go to the e…
    In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…

    758 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now