This article contains Best Practices and Troubleshooting steps with regards to background scanning in Mail Security for Exchange (SMSMSE).
The following sections contain steps that may help configuring and troubleshooting background scans in SMSMSE.
Below are the recommended settings for fast and efficient background scans.
The following screenshot shows Best Practices applied to SMSMSE Settings (Scans > Views > Auto-Protect):
In order to investigate potential issues with background scanning, the following steps can be taken to provide additional logging to Symantec Support.
It is important to consider that background scans are an additional scanning feature provided by SMSMSE.
On a default scenario, every email transiting through an Exchange environment where SMSMSE is running are already protected by:
a) Transport Agent
b) On-Access scan
Therefore, background scans are a viable option for those deployments with several Exchange DBs which may require different times for scans.
Additionally, it's important to consider that on average and with best practices applied, a background scan of 1GB emails will take approximately 6 minutes.
Events ID 405 logged in Windows Events while background scans take place:
How to check if a background scan has paused or stopped
The recommended way to determine whether a background scan process has been paused or terminated, is to look for Event ID 406 in the Windows Event logs.