RTVscan is taking up 50% - 99% of the CPU time when scanning.

Products

• Endpoint Protection

Issue/Introduction

RTVscan is utilizing high amounts of CPU time when performing scheduled scans, and the scans are taking longer than expected. Why does this occur?

Symptoms
CPU utilization varies between 50% - 99% when a scan is running. Scans can take several hours to complete.

Cause

A possible cause for high CPU utilization by RTVscan and long scan times is that the policy applied to Symantec Endpoint Protection clients has scheduled scans configured to scan mapped network drives. This causes scheduled scans to perform more work, with increased elapsed time, particularly if multiple clients are scanning the same network drives concurrently.

Resolution

Exclude the mapped network drives from scheduled scans on SEP clients. Instead, perform scheduled scans on these drives from the server to which they are attached.