Our intitial install of SAVLinux (SEP12) on OES/SLES Linux is scanning all files and as such really bogging down backups. We do need the real time scanning due to an infestation of ALS.Bursted.B that we are fighting.
ConfigEd.exe is refusing to see our exising Symantec infrastructure (still on 10 until we figure the migration to a new AV server), so the GRC.DAT option is looking dim, and then not finding any samples of that text file that have meaningful content or documentation explaining the keys within it, has killed that option.
./symcfg -r list -k ..... leads me to a couple of promising keys
Symantec Endpoint Protection\AV\Storages\FileSystem\RealTimeScan\FileType 0 REG_DWORD
Symantec Endpoint Protection\AV\Storages\FileSystem\RealTimeScan\Exts XLS,DOT,DOC,XLT,HTML,HTT,HTM,VBS,JS,SHS,PPT,MSO,POT,RTF,MDB,JTD,HLP,INF,INI,HTA,MP?,OBD,OBT,PPS,SMM,VSD,VST,XL?,VSS,JSE,VBE,SH,SHB,WSF,WSH,PL,PM,CSH,EXE,COM,BIN,OVL,SYS,DLL,OCX,VXD,BAT,BTM,CSC,PIF,386,CLA,OV?,DRV,SCR,ACM,ACV,ADT,AX,CPL REG_SZ
I am assuming that 'FileType'=0 is 'All Files' and am guessing that =1 would be use the list in 'Exts'. Can someone confirm this.
I see that the 'Exts' are all in caps, does that mean that SAV will parse them for both cases, or do I have to reenter them in in lower case as well as this is Linux that cares about such things and I am not in a good possition to test/gamble right now to be sure.
We really need documentation of the details of at least the more commonly used keys as to what are acceptable values and what gotchas there may be with them.
I have exhusted SAV_Linux_Impl.pdf & SAV_Linux_Client.pdf that came with the product and it all I've been able to find so far. This issue is way beyond those two basic documents as well as being beyond './symcfg -h'
Andy in Toronto