Symantec Endpoint 11.0 causing Backup problems NTBackup

[Migration User]

I have a windows 2003 standard server running an overnight backup through NTBackup. On this server we have installed Symantec Endpoint 11.0 as a manager and also a client. Since the Installation we have experienced problems where the NTBackup is taking around 5 hours longer to complete, since the installation of Endpoint.

We have turned off the option 'Scan when a file is backed up' within Advanced Scanning and Monitoring on the Policy for all Clients. This did not have any effect to the backup completion time.

The only change which did effect the backup completion time was the 'Enable File System Auto-Protect' option within the Policy. When this checkbox was unchecked the backup finished at the normal time (5 hours sooner) than it was finishing when this option was turned on. 

Please can anyone give me information on the following:

- Advice on whether the Backup Server should have Auto-Protect turned on - If auto-protect should be turned off then can this be scheduled or automated to turn off / on at certain times.
- Possible changes to Symantec Endpoint to allow NTBackup to function correctly (on time) i.e. settings to change in Endpoint or exclusions to files / folders

Thanks in advance

Frank

[Rafeeq]

Please check this discussion
You cannot have a schedule to turn the AP On
https://www-secure.symantec.com/connect/forums/slow-network-backup-symantec-backup-exec-and-enterprise-protection

[Migration User]

 Uncheck restart Auto-Protect after 5 minutes

then with you can run a batch file

net stop "Symantec Antivirus"

it will stop FIle system auto-protect

then once Backup is complete run 
net start "Symantec Antivirus"

or from SEPm - policies- AV policy - file system auto-protect -advanced-- Where it says "Start auto-protect once it is disable after" you can gives 1 or 2 hrs depending on how long your backup should take

then you can run 
net stop "symantec Antivirus" before backup then when backup will complete Autoprotect will start after schedule.

[Migration User]

Hi Rafeeq

The entry referenced in this article is not found in the registry on the server: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Smcinst
Also when we installed Endpoint it was a fresh installation and not an upgrade as previously we used Norton AntiVirus Corporate Edition 7.5. This was completely removed before installing Endpoint.

Is there anything else we could be look at?

Thanks

Frank

[Rafeeq]

if its not an upgrade then it wont be there,

With related to backup they want it to be disabled

Auto-Protect interference with backup and archive utilities
Auto-Protect may interfere with Exchange backup and archiving utilities. These types of utilities must access Exchange data, which will in turn trigger Auto-Protect scanning of that item before it can be archived. Symantec suggests that archive utilities be used with Auto-Protect disabled. Another option is to perform a serial scan with Auto-Protect enabled before the backup. This will cause most of the items in the Exchange store to be scanned by VSAPI before the backup utility is run. Therefore, they should not be rescanned as they are archived.

http://service1.symantec.com/support/ent-gate.nsf/854fa02b4f5013678825731a007d06af/422f1cbba6ac04ba88256bd0007e4f58?OpenDocument

Even if AP is turned off your weekly scan should  take here, its mentioned to perform a serial scan with AP before backup

[Migration User]

We had the same problems with BackupExec v12.  The following settings solved it for us.

Disable Network Drive Scanning:

1. Click the Policies Tab.
2. Click Antivirus and Antispyware.
3. Click the policy you would like to modify and then click Edit the Policy.
4. Click File System Auto-Protect.
5. Under Network Settings, uncheck Network.
6. Click OK.
7. Assign the policy by clicking Assign the Policy, then check each group to which the policy should apply.
8. Click Assign, then click Yes.

Disable "Scan when a file is backed up" and change scan of files only when modified:

1. Click the Policies Tab.
2. Click Antivirus and Antispyware.
3. Click the policy you would like to modify and then click Edit the Policy.
4. Click File System Auto-Protect.
5. Under "Scanning" click on Advanced Scanning and Monitoring...
6. Uncheck "Scan when a file is backed up"
7. Check "Scan when a file is modified"
8. Click OK to close "Advanced Scanning and Monitoring"
9. Click OK to close "Antivirus and Antispyware Policy" saving the settings
10. Assign the policy by clicking Assign the Policy, then check each group to which the policy should apply.
11. Click Assign, then click Yes

[Migration User]

What s the role of your server? 

[Migration User]

Kromine - We currently have these settings in place, 'Network' and 'scan when a file is backed up' are both unchecked. Also we have the option 'Scan when a file is modified.' checked.

AravindKM - The sole purpose of this server is an overnight backup

Our Current Working Solution (as advised in Forum)
Currently we have setup the 'symantec antivirus' service to stop before backup and start after backup through a scheduled task. This is working and the backup is finishing at the normal time.

Concerns
We have spoken to Symantec support and they have said that it is not advised to turn off auto protect. I understand that they would say this as it is part of there antivirus software package.

But can anyone tell me if they too have had this problem, the support have said it is the first reported incident?
If so is there another way of overcoming it?
Is it standard practice to turn off antivirus or a part of AntiVirus on a Backup Server?

Any response would be appreciated. Thanks for all previous replies.
Frank
     

[Rafeeq]

in one of my link above its suggested by symantec to turn off.
 Symantec suggests that archive utilities be used with Auto-Protect disabled.

we use lagato here , we turn off AV when backup  is running  and start after that
they have a script with net stop command thats it.

[Migration User]

Thanks again for your response Rafeeq. Im happy with this.

Frank