Virus definition files contain the necessary information for Symantec Scan Engine to detect and eliminate viruses. Updated virus definitions files are supplied by Symantec regularly and whenever a new virus threat is discovered.
Virus definition files are dated and have a version number so that when virus definitions change, Symantec software can determine the most current set of definitions.
When new virus definition files are available, Symantec LiveUpdate technology automatically downloads the files and installs them in the proper location on Cyclic mode Scanning is distributed evenly across all registered Symantec Scan
Engines using a continuous repeating sequence.
Priority mode Scanning is distributed to Symantec Scan Engines based on priority. When you register a Symantec Scan Engine, you specify the priority.
See“Registering Symantec Scan Engine with Symantec Protection for SharePoint Servers” on page 85.
91 Configuring Symantec Protection for SharePoint Servers Registering Symantec Scan Engine with Symantec Protection for SharePoint Servers
the computer that is running Symantec Scan Engine. If an error occurs during this process or there is a problem with the new virus definition files, Symantec Scan Engine attempts to roll back to the previous virus definitions and continue scanning. Occasionally, if you are running more than one Symantec Scan Engine, the versions of the virus definition files that are in use may temporarily differ until LiveUpdate has had a chance to update definitions for all of the scan engines.
For more information, see the Symantec Scan Engine Implementation Guide.
When you enable the auto-check feature, Symantec Protection for SharePoint Servers regularly polls the registered scan engines to verify that they are online.
Symantec Protection for SharePoint Servers also determines whether the registered Symantec Scan Engines have the latest definitions. You can specify how often you want Symantec Protection for SharePoint Servers to perform an auto-check.
Symantec Protection for SharePoint Servers also has a feature that you can use to perform an on-demand check of definitions.
The latest virus definition version and date number among the Symantec Scan Engines is registered with Symantec Protection for SharePoint Servers. View the virus definition version and date number that is registered with Symantec Protection for SharePoint Servers under Latest Virus Definitions.
You can configure Symantec Protection for SharePoint Servers to remove a Symantec Scan Engine if its virus definition files is older than the registered virus definition files. You must specify a threshold time within which the virus definition files must be made the latest. For a Symantec Scan Engine with an old virus definition version and date, Symantec Protection for SharePoint Servers first generates a warning message on the console page. Symantec Protection for SharePoint Servers logs this warning message and sends out an email
notification. If the virus definition files are not updated within the threshold time, the Symantec Scan Engine is taken offline.
92 Configuring Symantec Protection for SharePoint Servers
Registering Symantec Scan Engine with Symantec Protection for SharePoint Servers
Table 4-3 describes the options to check the status of registered scan engines and their virus definition versions.
To manually check for the latest virus definitions
1 On the Symantec Protection for SharePoint console home page, under Symantec Scan Engines, click Global Symantec Scan Engine settings.
2 Under Latest Virus Definitions, on the right pane, click Refresh.
Symantec Protection for SharePoint Servers polls the registered scan engines for the latest virus definition among them. This value is then displayed above the Refresh button.
To automatically check for the latest virus definitions
1 On the Symantec Protection for SharePoint console home page, under Symantec Scan Engines, click Global Symantec Scan Engine settings.
Table 4-3 Virus definitions checking options
Option Description
Refresh Immediately polls all registered Symantec Scan Engines for the latest virus definition among them.
Symantec Protection for SharePoint Servers registers the latest virus definition date and version number and displays this information.
Symantec Scan Engine auto check
Polls all registered scan engines automatically at the specified auto check interval for the online or offline status, latest virus definition date, and version.
Auto check interval (in seconds) The interval (in seconds) that Symantec Protection for SharePoint Servers polls the registered scan engines for their status and virus definition dates.
The default value is 60 seconds.
Take a Symantec Scan Engine offline if its virus definitions is not the latest
Takes a scan engine offline if the virus definition on the Symantec Scan Engine is older than the registered virus definition with Symantec Protection for SharePoint Servers.
Threshold time before taken offline (hours)
The time interval (hours) within which the virus definition files on the Symantec Scan Engine must be updated. Symantec Protection for SharePoint Servers takes the Symantec Scan Engine offline if the virus definition files are not updated within the threshold time.
93 Configuring Symantec Protection for SharePoint Servers Registering Symantec Scan Engine with Symantec Protection for SharePoint Servers
2 Under Auto-Check Options, on the right pane, check Symantec Scan Engine auto check.
3 In the Auto-check interval (in seconds) box, type the interval (in seconds) in which you want the auto-check process to occur. Symantec Protection for SharePoint Servers polls the registered scan engines at the interval that you specify for their statuses, and their virus definition versions.
The default setting is 60 seconds. You can enter a value between 20 and 360.
4 Check Take a Symantec Scan Engine offline if its virus definition is not the latest to take a Symantec Scan Engine that does not have the latest
definitions out of rotation.
Symantec Protection for SharePoint Servers compares its virus definition version with the version on each registered Symantec Scan Engine. If any Symantec Scan Engine has a virus definition older than the registered virus definition, that scan engine is taken offline.
5 Click Save.
94 Configuring Symantec Protection for SharePoint Servers
Registering Symantec Scan Engine with Symantec Protection for SharePoint Servers