Scheduled AV scan timing discrepancy
search cancel

Scheduled AV scan timing discrepancy

book

Article ID: 449924

calendar_today

Updated On:

Products

Endpoint Security Complete

Issue/Introduction

Symantec Endpoint Security (SES) agent related scheduled scans occurring outside of scheduled time / window

For example: 
Weekly scheduled scan configured to start on Friday
Time: 2100 hours
Scan Duration: Scan for up to 48 hours with randomization enabled
Missed Scheduled scans retry disabled

Results: scheduled scan starts on Monday or Tuesday in error 

Environment

Symantec Endpoint Security  (SES)

Cause

The SEP AV registry value: ScanWindowDayOfWeek is currently set to 0. This means that SEP AV is using Sunday as the configured day.
As a result, the AV scan may start on Monday or Tuesday at random within the configured 48-hour window.
This issue is caused by a PCH coding error that fails to set the scheduled scan policy correctly.

Resolution

We are aware of this issue and will be addressing this in an upcoming release. 

Workaround: 
Delete the problem scheduled scan within the Malware Protection policy and create a new one to resolve. 

Additional Information

CRE-24346