INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Jobs

Antivirus Scans, SEP, and Commvault Differentials

Antivirus Scans, SEP, and Commvault Differentials

(OP)
Ok,


Here is the problem, wondering if anyone has seen this or knows a way around it.

We have SEP as our antivirus on our servers, the scheduled scan is set for Tuesday night, full system scan.

Once the scan runs our differentials now turn into basically fulls. We are currently renewing support so I cannot get a ticket open with commvault. It appears that commvault is checking the file access date to determine what has changed since the last full(which we run once a week on Saturdays). If this is the case, this is stupid, file access dates can change if you search a server, it should be checking the fiel modification date.

Has anyone seen this behavior and if you have , is there a workaround or a patch? Any help would be appreciated.

RE: Antivirus Scans, SEP, and Commvault Differentials

This could be a solution for you (from Books Online):

"Set the Archive Bit Attribute
To set the archive bit:
From the CommCell Browser, right-click the desired file system backup set node, and then click Properties from the shortcut menu.
From the General tab, select the Check archive bit during backups option.
Click OK to save your change."  

RE: Antivirus Scans, SEP, and Commvault Differentials

(OP)
Dutchtreat,

I am aware that I can change the scan to classic and set the archive bit but that requires that the next job to be a full, I have over 250 servers that I would have to make this change to. It does not really matter, we just moved the av scans to Friday since I run my fulls then anyway, no harm done. It still does not make any sense at all to check the file access date to determine if  a file has changed, this is just bad design on Commvaults part and I actually like commvault a lot.

Thanks for the advice

RE: Antivirus Scans, SEP, and Commvault Differentials

We had the same issue with SEP where it modifies the change journal that commvault uses to check whtat files to backup. THe note below refers to SEP 11.0 but if you have older versions chech the symantec site


Question/Issue:
You configure backup software to run an incremental backup job that is based on USN change journal entries. After Symantec Endpoint Protection runs a manual scan or a scheduled scan, the backup software performs a complete backup job instead of an incremental backup job. Similarly, DFS (Distributed File System) replicated shares are based on USN change journal, and running Manual or Scheduled Scans against the shared folders will trigger unnecessary replication traffic.


Solution:
The following setting suppresses file modifications for attribute updates, last access dates, and security descriptors.


To fix the problem on 32-bit versions of Symantec Endpoint Protection client, create the following DWORD value and set it to 1:

HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\AV\NoFileMod
To fix the problem on 64-bit versions of Symantec Endpoint Protection client, create the following DWORD value and set it to 1:

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\Symantec Endpoint Protection\AV\NoFileMod

 

RE: Antivirus Scans, SEP, and Commvault Differentials

Excellent.  Have this issue and I will implement changes.   

Red Flag This Post

Please let us know here why this post is inappropriate. Reasons such as off-topic, duplicates, flames, illegal, vulgar, or students posting their homework.

Red Flag Submitted

Thank you for helping keep Tek-Tips Forums free from inappropriate posts.
The Tek-Tips staff will check this out and take appropriate action.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members!

Resources

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close