Why is my virus scanner at full capacity?

Article #:

Product

Castle

1792

Guardian, Anti-Spam

Up to Framlingham

Summary

Browsing is being disrupted as a result of a warning "Virus Scanning at full capacity".

Being more specific about the type of content you would like to scan rather than scanning all web content can resolve this issue.

Note: This article only applies to those Smoothwalls running an Edinburgh release or earlier as the anti-malware engine used by the Smoothwall has been updated in Framlingham.

Problem

Users are unable to browse because "Virus Scanning at full capacity".

Solution

If Virus scanning is at full capacity it is because the anti-malware engine is configured to scan a huge amount of content, and on a busy box this exceeds the available resources.

Virus scanning is not necessary on all web content, only on certain file types.

1. Go to Guardian > Anti-malware > Manage policies.
2. Edit the default virus scanning rule:
Remove the Everything parameter
Choose only certain file types (such as Archive file types, Audio and Video files types).

It is not necessary to Virus scan standard web content, only downloadable files.

For more information about creating and editing anti-malware policies in the Smoothwall, go to https://help.smoothwall.net/Latest/Content/modules/guardian3/cgi-bin/guardian/av.htm.

Attribution:

Last updated:

Author:

Contributions by:

23 August 2016

 

DMT

 

Copyright © 2000-2016 Smoothwall All rights reserved.