How to enable scanning timeouts for Protection Engine 8.2.2

Products

• Protection Engine for Cloud Services
• Protection Engine for NAS

Issue/Introduction

Procedure to configure Scan timeout in SPE. Also details out steps to bypass the scan timeout error if required.

Resolution

1. Stop the symcscan service (on Windows, the display name is Symantec Protection Engine).
2. Change ScanTimeoutInSeconds and ByPassScanTimeoutError as desired
3. Start the symcscan service

 

To change ScanTimeoutInSeconds and ByPassScanTimeoutError in SPE 8.2.2

1. Change directory to the folder containing the configuration.xml file
2. To find the current ScanTimeoutInSeconds, do one of the following: 
   Linux: ./xmlmodifier -q //configuration/ScanTimeoutInSeconds/@value configuration.xml
   Windows: xmlmodifier.exe -q //configuration/ScanTimeoutInSeconds/@value configuration.xml
   
   
3. Note the current value
4. To set a new value, do one of the following:
   Linux: ./xmlmodifier -s //configuration/ScanTimeoutInSeconds/@value 20 configuration.xml
   Windows: xmlmodifier.exe -s //configuration/ScanTimeoutInSeconds/@value 20 configuration.xml
   
   ... where 20 is the number of seconds for the timeout value  Note: If using a Netapp filer this should be set to 2/3 of the value of the Netapp Filer Request Service Timeout.
   
5. To find the current ByPassScanTimeoutError, do one of the following: 
   Linux: ./xmlmodifier -q //configuration/ByPassScanTimeoutError/@value configuration.xml
   Windows: xmlmodifier.exe -q //configuration/ByPassScanTimeoutError/@value configuration.xml
   
   
6. Note this value before continuing.
7. (OPTIONAL) To set ByPassScanTimeoutError to false, do one of the following:
   Linux: ./xmlmodifier -s //configuration/ByPassScanTimeoutError/@value false configuration.xml
   Windows: xmlmodifier.exe -s //configuration/ByPassScanTimeoutError/@value false configuration.xml

 

• ScanTimeoutInSeconds. Allowed values are positive numbers. Set this value to the desired maximum scan time, in seconds. After the value is reached, SPE will stop processing the scan request and return a verdict.
• ByPassScanTimeoutError. Allowed values are "True" or "False". .
  • With a value of "False" SPE will return a scan error to the scan request and log a Generic 36 result to the SPE log.
  • With a value of "True" SPE will return a clean verdict to the scan request, and log the same Generic 36 result to the SPE log.

Additional Information

If you are running SPE 8.2.0 or 8.2.1 you would need to upgrade to SPE 8.2.2 to implement this feature