Product impacted:
Symantec Endpoint Protection 11.x
Symantec Endpoint Protection 12.x
The administrator defined scheduled scans cannot be configured from the endpoints. It cannot be paused, snoozed or stopped unless the options Show Scan Progress is selected on the Antivirus Policy in the SEPM.
If the Show Scan Progress is selected, the checkboxes to pause, snooze or stop becomes available. Once these options are checked, the SEP GUI pop-ups steal focus. This disrupts many users and can actually have a detrimental impact on our business. A pop-up for instance that grabs focus from an active application could easily cost our trading community a significant amount of money. In addition be it 30% or 90%, if you disrupt the scan, it restarts at the beginning. This can be troublesome for mobile users who are travelling between offices, etc
It would be better if:
1. There is a notification to the users that the scheduled scan is about to start. A notification with a configurable countdown, and one that does not steal focus from the active application.
2. There is an option to pause / snooze / stop the scheduled scan from the system tray
3. There is a notification in the system tray (e.g. icon change) to indicate a scan is taking place and how far it is into the scheduled scan.
4. A disrupted scan can restart from where is was disrupted rather from the beginning