Scan Engine 5.2.11 / Max File Size

[ingo.siegel]

We have the requirement to scan files witch are at least 120 GB big. What is the recommended maximum file size for Scan Engine to scan and what is it depending on.

[Migration User]

Greetings,

In the past the Scan Engine file size limit was hard set to 2GB.  I understand the need to have files scanned, but it starts to become unpractical to be scanning such large files for viral content.

Since Scan Engine is a scan on demand, SE(Scan Engine) has to be provided with the data, or be told where to get the data.  This has to be transferred across the network and then scanned once the transfer of data has been completed.  If you have an application that is serving files to end users such as Netapp or EMC filers, this is going to cause very long delays in file operations.

I would expect the Symantec Endpoint Product to have similar issues in scanning as the core scanning technology is the same across AV products.

 

Here is a  section taken from the Getting started guide from the 5.2.11 build.(Page 10)

Symantec Scan Engine can now process specific container types
of size up to 30 GB.
A new parameter called DecFileSize allows Symantec Scan
Engine to decompose top-level container files of type tar/rar/zip
up to 30 GB. For other container types, the maximum top-level
container file size can be up to 2 GB.
 

[Migration User]

This option is available for the ICAP and native protocols only..the maximum size
includes the size of the entire message body and all attachments.

By default, Symantec Scan Engine has no limits on total file or message sizes.

if you want to specify maximum size then follow following stepes :--

(1) in the console select policies

(2) and in the sidebar select filtering .

(3)In the content area on the Files tab, under Blocking by Total Message Size, in the Block files or messages that are larger than box, type the maximum file size (in bytes).

(4) set the value and then save it

[Migration User]

There are size limits to what the scan engine can scan as seen in Nathan's comment above. Prior to 5.2.11 nothing larger than 2 gb could be scanned.

[ingo.siegel]

Thanks a lot - we usually process Files with Size up to 5 MB (very big), Files greate than 5MB are seldom so everything is OK.

Our (internal) Customer asked to send such extrasized Files only once a Month in an automated Process. The Max File Size is 2 GB per File and if the File is a Container-File like ZIP etc. the unzipped size (including zip in zip) must not exeed 30 GB (30719MB).