How to disable compressed file scanning in older versions of SEP for Macintosh.
Are the SEP for Macintosh clients... 1.) managed by a Symantec Enpoint Protection Manager, or 2.) unmanaged?
1.) SEP clients managed by a SEPM server: To disable scanning of compressed files
Auto-Protect scans: SEPM Antivirus and Antispyware policy, Mac Settings, File System Auto-Protect, Scan Details tab, "Scan compressed files" checkbox
Scheduled scans: SEPM Antivirus and Antispyware policy, Mac Settings, Admin-Defined Scans,Common Settings tab, "Scan compressed files" checkbox
On-demand scans (as commanded via right-click in SEPM client listing): SEPM Antivirus and Antispyware policy, Mac Settings, Admin-Defined Scans, Scans tab (at bottom, "Administrator On-demand Scan settings").
Manual scans commanded through the local SEP client GUI (or navx command line): these scans use settings that are independent of any SEPM policy configuration. See "Unmanaged SEP for Macintosh" instructions below for manual and scheduled scans.
1.) Unmanaged SEP for Macintosh clients: To disable scanning of compressed files
Auto-Protect scans: Using the SEP for Mac client GUI, open System Preferences, Symantec Auto-Protect. Click the padlock icon in the lower left corner to authenticate with your Administrator password. Click the "Off" radio button option for "Scan Compressed Files" to disable the scan of archives. Alternatively, the settings can be modified via the Terminal command line (commands are case-sensitive):
sudo defaults write /var/root/Library/Preferences/com.symantec.autoprotect ScanCompressedOn -bool NO
User-scheduled scans: For ALL user-scheduled scans, from the SEP client Terminal command line (note capitalization):
defaults write /Library/Preferences/com.Symantec.SAVX ScanCompressedPref -bool NO
Manual scans run by the local user through the SEP client GUI: There is a checkbox labeled "Scan within Compressed Archives" in the client GUI for SEP for Macintosh. This setting does not affect AutoProtect or scheduled scans; it affects only manual scans that are run from the client GUI. Changes to the default state of this setting (checking or unchecking the box) are not retained if you close and re-open the GUI. But the command below will change the default setting globally for all users:
defaults write /Library/Preferences/com.Symantec.NAVX ScanCompressedPref -bool NO