Norton1 shut itself off late last week. Stefanie had a look at it and managed to get it back on it’s feet:
- SYSTEM volume was almot full on Norton1. Stef found scads of MSFTPSVC log files and deleted them.
- SAV service would not restart… apparently due to corrupt virus definitions. Repaired by following advice at Symantec KB:
- We set the IIS service to keep it’s logs on the D: (vol1) drive instead of SYSTEM. Geoff will work on a script to purge logs >1 week old
- We set the FTP service idle connection timeout from 900 seconds to 120 seconds to cut down on hacker locking FTP service connections.
RESOLVED that we need to look at changes to services on Norton1/2:
- auto purging to old quarantine files
- auto purging of AV service events for faster loading of log viewers
- load balancing of client across Norton1/2 for better performance/reliability
- potential benefits of upgrade to SAV 10.0