Hi,
"To enhance performance, Forefront Security for Exchange Server allows additional processes to be created for the Realtime Scan Job. If the first process is busy scanning a file, the second process will begin to scan, and so on. By default there are
four Realtime Scan Jobs running. This can be increased up to ten by changing the
Realtime Process Count field found under General Options > Scanning."
Here are some recommendations to reduce the consumption of memory:
- on a server which doesnt perform the mailbox role we can
disable the Realtime scanjob
- on the Maibox servers disable Transport/Internet scanjob
- Exchange 2007/Forefront introduce the AVstamp aimed to avoid duplicated scan processes at the Store server
(http://technet.microsoft.com/en-us/library/bb896620.aspx), we can keep the
Realtime scanjob at a minimum and no other filter
- reduce the number of transport process count to 2
Best Regards,
Joyce