Anti Virus update takes ages - also fails mostly

[jvishal]

Hi All,

I am new to the forum and its my first ever NAS. So if this question is not in the right thread, pardon my ignorance.

I am using DS220j since 3 months. Two WD Red Drives of 12 TB each. I have ton of other queries but the biggest one for now is whenever i update the Anti Virus - it takes very long time (sometimes even 2 hours or more). Also many a times the update fails.

When i attempt a manual update the three files needed dont get downloaded. Only the first one downloads and other two dont.

Whats the solution to this ? Is it a common issue or just with me ?

Many thanks in advance for your help and support.

 

[Rusty]

Sounds like an Internet issue in terms of speed. It should really not take that long. What Internet speed are accessible to the NAS, or should be accessible?

 

[itsjasper]

Could also be DNS... try setting the DNS entry on the NAS to 1.1.1.1 and see if that fixes the AV download issue. if it does, check your router dns settings.

 

[fredbert]

Suggest you have a look here…

Antivirus Essential

Antivirus Essential is a free and easy-to-use package that protects your Synology NAS and your files from viruses.

www.synoforum.com

No end of problems with AV Essentials and lower spec NAS. You will most likely be using AV on your client devices. Have a look at the Synology Security Checklist too.

Security - Security Checklist for your Synology

How strong is your cybersecurity strategy? The engineers at Synology have put together this Security Checklist to make sure you have all your bases covered. *this PDF is from Synology and is available also on their download page here

www.synoforum.com

 

[Telos]

Clam AV is near-useless. Its focus is Windows malware. It has never protected the NAS. I abandoned it years ago. Just uninstall. Let Windows Defender protect your Win machines.

 

[jvishal]

Sounds like an Internet issue in terms of speed. It should really not take that long. What Internet speed are accessible to the NAS, or should be accessible?

Thanks a lot Rusty - My internet speed is 150 MBPS both Upload and download in the browser using which i am using the NAS interface (DSM). How can i check the speed which NAS is getting?

 

[Rusty]

Thanks a lot Rusty - My internet speed is 150 MBPS both Upload and download in the browser using which i am using the NAS interface (DSM). How can i check the speed which NAS is getting?

Before that try the dns change that was suggested as well. Just to be clear that you do actually get same poor speeds when using a different one

 

[jvishal]

Before that try the dns change that was suggested as well. Just to be clear that you do actually get same poor speeds when using a different one

I have changed the DNS as suggested to 1.1.1.1 and now trying to update the AV. Let me see how does this go.
[automerge]1684915434[/automerge]

Clam AV is near-useless. Its focus is Windows malware. It has never protected the NAS. I abandoned it years ago. Just uninstall. Let Windows Defender protect your Win machines.

God knows why but i had a similar feeling. I am not using wndows but a Mac Studio. I am hobbyist phorographer and the prime reason for buying this NAS was to store all my RAW files which are approx 4 TB. I only switch it on when i need to work on my RAW files (process them).

 

[fredbert]

Have a look in Resource Monitor and you'll probably see that synoavscan has a big chunk of physical RAM. Knowing what it was like when I removed AV Essential from my DS215j (512 MB RAM) I've reinstalled it and seen how a signature update works on it and my DS218+ (6 GB RAM). Neither has done any scans so they both start from the same signatures date.

DS218+ took 1 minute 3 seconds to complete the AV signature update. The DS215j has been running for over an hour and is currently using around half the RAM and lots of swap space read/writes (normally there's no swap activity), the CPU usage is mostly pretty low at this point in the update.

Recent DS215j activity, spot when I installed AV Essential and then started the signature update. Normally this is run as a SMB file server for Time Machine.

In Package Center it says

Where I think the words 'less than' are a typo. This package used to work and update in a reasonable timeframe, well overnight, but something happened and on low RAM NAS (is there anything left that is <512 MB?) it really doesn't work. For backups I would consider client-side protection, and backup the backup using off-device storage.

 

[fredbert]

DS218+ took 1 minute 3 seconds to complete the AV signature update. The DS215j has been running for over an hour...

DS215j finished in 5 hours 14 minutes and 9 seconds. That's only 5 hours 13 minutes and 6 seconds longer than the DS218+ !

Then add doing whatever AV scan you wanted now you have the latest signatures. I recall it was even [multiple times?] longer than doing the signature update.

 

[fredbert]

I thought I'd set off a System scan on the DS215j, just to see how long that would take. It skipped updating signatures, due to them being up to date already, but still took over 4.75 hours to complete. So that would make a usual System scan where it does the daily signature update last over 10 hours. For comparison the DS218+ takes around two and half minutes.

If you ever get AV Essential to run in any meaningful timeframe I would let it do the update and System scan and then you can decide if it really takes too long (look in the AV Ess Logs page of the package). It could be that the process is throttled so it doesn't impede normal activities but really taking this long means that what value it may have (I'm not entering that argument) is somewhat diluted. I have it running on my DS1520+ because it does no harm (I set it to not move items) and the performance impact is so negligible that I actually don't realise it's there... that also could be said to be that it's not finding anything so I'm lucky/careful/Mac user/it's not looking for things that affect me.