Solved

AV On-demand scanner/On-access scanner query

Posted on 2008-10-13
6
975 Views
Last Modified: 2013-12-09
Hi

I have a query regarding AV scans. From what I understand there are two types, on-demand and on-access, and I think they are as below. Could someone clarify?

On-demand: The scan that takes place at a set time each day/week etc

On-access: Real time scanning that occurs whenever someone reads a file/writes to a file.

Also, it is possible to set the AV to scan 'on read' and 'on write'. Can someone clarify what this means and what would be recommended for, say, a shared folder on a file server?

0
Comment
Question by:bruce_77
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 3

Expert Comment

by:razorwoods
ID: 22705232
It's literal.  On Demand means that it's going to check at a specific time that's been scheduled or when you manually tell it to.  On Access means whenever the file is accessed by the machine running the AV.  So if you're the client machine running the AV and you have it set to On Access then any file your machine opens or modifies in any way will be scanned.  There are always file type exceptions in your AV preferences so be careful to know what those are.

0
 
LVL 2

Author Comment

by:bruce_77
ID: 22705338
Thanks..

So the access-scanner set to scan 'on read only' means everytime the file is accessed?

And the similarly set to scan on 'write only' means everytime the file is modified?

Are there any recommendations on which one to use?
0
 
LVL 3

Expert Comment

by:razorwoods
ID: 22705391
If it doesn't impact the performance of your machine too much leave them both on.  If you're accessing a shared folder that other machines are also accessing then always have the 'READ' on and again if your machine doesn't have any performance issues also do the WRITE as well.

The main difference is that if you're READING the file you want to make sure you're not opening anything that has a virus, and when you WRITE the file you want to make sure that something else doesn't piggy back on top and write with it.

0
2017 Webroot Threat Report

MSPs: Get the facts you need to protect your clients.
The 2017 Webroot Threat Report provides a uniquely insightful global view into the analysis and discoveries made by the Webroot® Threat Intelligence Platform to provide insights on key trends and risks as seen by our users.

 
LVL 2

Author Comment

by:bruce_77
ID: 22705530
To be honest, I'm still a little confused..

Let's say I have a folder named HR, on my File/Print server, FP01.

On read only: Does this mean scan whenever -any- computer accesses the file (read the file), or whenever FP01 (or rather a user logged onto FP01) opens a file in HR and reads it?

Likewise,

On write-only: Does this mean whenever any computer attempts to modify files within HR, or when FP01 modifies it?

Thanks for the help
0
 
LVL 3

Accepted Solution

by:
razorwoods earned 500 total points
ID: 22705599
If this is a workstation or home version of the AV program then it will ONLY engage On-Access if the person is on FP01 and accessing.  The AV program won't know if a network user accesses the file, only a local user.  Local to the machine running the AV software.

If this the a full server version of AV there are lots of other special settings typically for the network as well.

0
 

Expert Comment

by:outerheaven
ID: 22706070
On read scanner is every file used by the computer put into memory of every file being read from your hard drive , and On write is every time a file is written on to the hard drive. the scenario oof a share file server i would recommend both of them but especifically if you have network map drive there is an option for this called network drives. the most demanding of the two features is on read but is the most safe to use, i would recommend and use both cause some types of viruses write files on your pc through share folder and this option will defenitely stop the virus from replicating, on the other hand y are constantly using files from this server the on read option scans every file you are using from the server on use. on some scenarios where the pc doesnt have enough hardware what we usually do is leave only the on write feature cause is the less demanding and we set and on demand scan more often like 3 times a week.
0

Featured Post

2017 Webroot Threat Report

MSPs: Get the facts you need to protect your clients.
The 2017 Webroot Threat Report provides a uniquely insightful global view into the analysis and discoveries made by the Webroot® Threat Intelligence Platform to provide insights on key trends and risks as seen by our users.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Change your password...do it now!. Probably the easiest point of access to your account is through guessing your password. If your password is guessable, do change it now. If not for your sake but for everyone else in your friends list. Remember …
UPDATE - 6/15/2011 Added support for Release Update 6 Maintenance Patch 2 Point Patch 1 (RU6 MP2 PP1). Fixed a defect in the username field that was hard-coded to look for a specific domain (left over code from testing). This release will be the …
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question