Disabling the Anti-Malware Periodic Scan

"Anti-Malware Scan Storms" can occur when anti-virus scans run at the same time on multiple virtual machines on the same physical server.

A degradation of system performance is possible that can affect disk I/O and CPU usage.

We recommend that you disable the Anti-Malware periodic scan in one of these ways:

  1. In Endpoint Web Management

    1. Go to the Policy Page.

    2. In the right pane, click Web & Files Protection.

    3. In the Perform periodic scan every field, select Never.

    4. Click Save.

    5. Install policy.

  2. Configure the Windows Registry settings on the client machine

    To configure the Windows Registry settings on the client machine:

    1. In Windows Registry, configure the value 0x0b for the AVSchedOf key:

      • On 64-bit operating system:

        HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\CheckPoint\EndPoint Security\Anti-Malware\AVSchedOf=(DWORD)0x0b

      • On 32-bit operating system:

        HKEY_LOCAL_MACHINE\SOFTWARE\CheckPoint\EndPoint Security\Anti-Malware\AVSchedOf=(DWORD)0x0b

    2. Restart the machine to restore Self-Protection.

      Use the Compliance Software Blade to change the registry. See sk132932.