Network is very slow while Symantec endpoint protection is enabled.

Posted on 2008-11-06
Last Modified: 2013-12-09
What is endpoint protection doing to my network that will be slowing software over the network.  I have setup exceptions for the program files folders of the programs in question and the shared network drive.  Also i have setup exceptions for the myob database file exception which is .myo and the other program affected which is .mdb.

The problem goes away when we disable the antivirus shield on the client computers.

How can i fix this issue?
Question by:DiscoDean
    LVL 12

    Expert Comment

    What features of SEP did you deploy with the client? If you included the firewall, I would disable that to start with.
    LVL 5

    Expert Comment

    Things you can try:

    Disable Firewall
    Change AntiVirus & AntiSpyware Policy to only scan modified files.

    Change the communication time between clients and server:

    In the Management console go to | Clients | select a group | Policies | Communication Settings and change Download from push mode to Pull Mode & then change the heartbeat Interval to 2 hours.

    Now the clients will only communicate every two hours instead of constantly back and forth.


    If you have multiple management servers you may want to check which management server the clients are communicating to ?

    Author Comment

    All the installations are unmanaged installs.  The minimum options were installed with no network threat protection etc.
    LVL 12

    Accepted Solution

    Looks like you're using MR2+MP1. Is that correct? Have you tried MR3 on one of the clients yet? If all your workstations and servers have some type of AV protection on them, you can disable scanning network drives altogether, and trust remote SEP clients. This is done in the AV/AS policy.

    Author Comment

    What is MR3? Where do I access the AV/AS Policy?

    LVL 5

    Expert Comment

    If they're all unmanaged then you'll have to open the SMCGui on each of the clients and try the following:

    Change Settings | Configure Antivirus and AntiSpyware Protection | File System Auto-Protect

    File Types change to selected

    Options | untick Scan files on network drives

    Advanced | Scan when a file is modified

    Floppies | untick if your machines have no floppy drive |


    Change Settings | Client Management | Schedules Updates

    Change the Frequency to daily : and select a time ( lunch is usually a good time )


    Scan for threats :

    If you have a scheduled scan you may want to tune the settings for better performance


    Other things to note , if you have SEP installed on servers you may want to add exceptions for certain services such as Domain Controllers , SMS , WSUS , SQL and other applications like Email.

    If clients have local copies of their emails , outlook , notes , groupwise you may want to exclude this directory from threat protection.

    incidentally : MR3 is the latest release of the software you should be able to download from symantec's file connect website :

    It gives greater performance that previous version which may also help


    Featured Post

    What Should I Do With This Threat Intelligence?

    Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

    Join & Write a Comment

    PREFACE The purpose of this guide is to provide information to successfully add specific IIS 7.0 role services for the Symantec Endpoint Protection Manager (SEPM) to function properly when installed on Windows 2008. AUDIENCE Information Technol…
    By the time you finish reading this article, you may have already lost all your money because you don't know the simple steps to securing your BitCoin wallet. BitCoin is an incredible invention. It is a decentralized currency system, which is the…
    This video discusses moving either the default database or any database to a new volume.
    Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

    755 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now