Excluding large files from scanning to improve scan and network performance in Symantec Protection Engine 7.5

book

Article ID: 181887

calendar_today

Updated On:

Products

Protection Engine for Cloud Services Protection Engine for NAS

Issue/Introduction

 

Resolution

Issue

You wish to exclude files over a certain size from scanning.

 

Cause

Symantec Protection Engine (SPE) 7.5 has the ability to exclude files from scanning based on the FileSizeScanThreshold parameter. Files greater than the size (in bytes) set for this parameter will be excluded from scanning and will not be copied to the Scan Engine server.


 

Solution

 Please follow the steps below to enable the FileSizeScanThreshold parameter:
 

  1. In services.msc stop the Symantec Protection Engine service
  2. Open a command prompt on the Symantec Protection Engine installation folder
  3. Type the following command:
    xmlmodifier -s /filtering/FileAttribute/FileSizeScanThreshold/@value <valueInBytes> filtering.xml
  4. Start the Symantec Protection Engine service

This parameter is applicable in RPC and ICAP (FILEMOD)

  • The value is in bytes
  • If file size is greater than configured threshold, then Protection Engine will return a clean verdict, an information event will record that the file was greater in size than the File Size Scan Threshold