Product guide

Other Common Configuration Changes
You can make changes to the VirusScan Enterprise 8.8 default configuration to add or improve
other performance characteristics.
Contents
Configuring on-access scanning of network drives
Configuring exclusions on Exchange servers with GroupShield
Configuring on-access scanning of trusted installers
Filtering 1051 and 1059 events
Configuring on-access scanning of network drives
Network access drives are not, by default, scanned for malware when you access the drive.
On-access scanning of a shared network drive could significantly reduce the performance of
the scanning system offsetting that small security risk. This is potentially a large security risk.
This risk can be reduced by having anti-virus protection on the remote network drives.
If you decide to enable on-access network drive scanning you should understand the:
• Limited system security risks involved — Allowing users to connect to network drives
without scanning those drives on-access does introduce minor security risks to the users
system during the initial connection phase. But, if the user copies any file or folder from the
network drive that information is automatically scanned for malware during the write process.
• Possible performance changes — The performance impact of scanning an entire remotely
connected drive is determined by the drive's proximity and the network connection speed.
• Configuration processes — You should not, under normal security requirements allow
on-access scanning of network drive connections for performance reasons. But if your security
environment requires scanning of network accessed drives, perform the following two tasks:
• Enable on-access scanning of the network drives
• Configure the permissions on the remotely connected shared drives.
To enable on-access scanning of the network drives using ePolicy Orchestrator, access VirusScan
Enterprise 8.8.0, On-Access Processes Policies, and click Scan Items. Next to Scan files,
click On network drives. The following ePolicy Orchestrator 4.5 display shows scanning of
the network drives enabled.
McAfee VirusScan Enterprise 8.834