VirusScan preventing saving of large file on network share

[curo]

We are having an issue where McAfee VirusScan is preventing Office programs from saving large files directly to a network share. We have folder redirection configured such that the user's Documents and Desktop are stored on network drives. Because of this, we have our On-Access Scanner policy set to scan files on network drives.

What happens is, when you try to save the file, in this case a 15MB Powerpoint file, you get the error "Someone else is working in {file path} right now. Please try again later"

No one else has the file open. If you copy the file locally it saves fine. If you disable the On-Access scanner, it saves fine. If the file is smaller, say only a couple of MB, it will save fine.

To me it feels like the scan is timing out or something along those lines. Or maybe not timing out fast enough. Any suggestions?

[ryadav1]

Hello Curo ,

To begin with , i would recommend you to to apply the McAfee Default policy on couple of machines and check whether the issue persists . 

IF the issue still persist , Kindly capture the MER & Procmon  and reach out to McAfee Technical Support .

Thank you 

[rmetzger]

Hi Curo,

Do you have VSE running on the Server/Network Share?

I observed this same behavior years ago, when I had VSE On-Access policy running on the server where the shared file is stored.

When the local On-Access Scanner policy is set to scan files on network drives, the Server On-Access scan would lock the file. With large files, the relatively slow write speed across the network causes the local On-Access policy to lose priority to the Server On-Access policy; the file locking is now in a deadly embrace. Neither side wins and both sides just drop the file causing the file copy failure.

Yes, it's a timing issue, where small files can complete before the file locking issue is seen.

If this is happening, you should be safe in turning off Local policy: On-Access Scanner - Scan files on network drives, as long as the Server Policy is set to scan files on Write. Be sure to include all file types you feel should be scanned (currently defined locally) on the Server side On-Access policy.

I found this improved network performance as well.

Anyway, just a thought.

Let us know if this is helpful.

Thanks,

Ron Metzger

Was my reply helpful?
If this information was helpful in any way, or answered your question, will you please select "Accept as Solution" in my reply, or give kudos as appropriate, so together we can help other members?

[IT-LIC]

Accept as Solution
thxs Ron, you did my day today !