Skip to main content
Solved

"Passive write scan"

  • July 22, 2015
  • 2 replies
  • 136 views

Nemo
Community Leader
Forum|alt.badge.img+34
  • Community Leader
My WR logs have several entries each day "Begin passive write scan" and "End passive write scan". They are mostly for 1 file but can be up to 9 files and only take a second to complete. 
 
Just curious as to what these scans might be if anyone can assist. I do a regular scan every day that hasn't found anything malicious to date.

Best answer by JohnnyS

The setting that is logging this information is "Realtime Shield - Scan files when written or modified". Our software does active scanning of disk I/O and this is the logging you are seeing. If you see a high number of files at a time (usually around 40+) it may be causing performance issues, and I'd suggest turning that setting off. In the GUI it's under Advanced Settings - Shields - Check files for threats when written or modified.

2 replies

JohnnyS
  • OpenText Employee
  • Answer
  • July 22, 2015
The setting that is logging this information is "Realtime Shield - Scan files when written or modified". Our software does active scanning of disk I/O and this is the logging you are seeing. If you see a high number of files at a time (usually around 40+) it may be causing performance issues, and I'd suggest turning that setting off. In the GUI it's under Advanced Settings - Shields - Check files for threats when written or modified.

Nemo
Community Leader
Forum|alt.badge.img+34
  • Author
  • Community Leader
  • July 22, 2015
Many thanks Johnny, that is very helpful. I've just done a more thorough search in the log files and see that occasionally there have been up to 69 files at any one time but even then the scan only takes 2/3 seconds. I'll monitor the situation and adjust the setting if I feel it's affecting performance.
 
Nemo