Sandblast | Long scanning time | TE100X

[Daljit_s]

Hi All, 

Using Threat emulation, Users are reported that randomly the file scanning is taking many hours to scan and the file size is also not big,They are facing the issues since last year.

Checked the logs and didn't found anything wrong. Is there any way i can check the scanning time for all the files in last 24 hrs.

One thing i noticed that if i do the local scan (on the gateway te_add_file) for one of the test file (10 kB) as a test and that process is keep on running (from last 2 hrs) and giving below message. I remember i tested the same test file in january, that time it was scanning in 20 sec.

---------------------------------------

# Waiting for response from ted...

# Waiting for response from ted...

# Waiting for response from ted...

# Waiting for response from ted...

----------------------------------------

Version: - 80.30 Take 50

any pointer for the troubleshooting?

[PhoneBoy]

Emulation should not be taking more than a few minutes for almost any single file (though I can see archives taking longer).
I recommend getting the TAC involved here.