Symantec DLP High Speed Discovery Uses a Shared Index to Speed Repeat Scans

· Original article ↗

Summary

Symantec says High Speed Discovery uses a shared per-target index so worker nodes can identify changed files and avoid rescanning unchanged content across large repositories, while providing inspection and exclusion telemetry.

Key points

  • The product uses a shared incremental index for each scan target, storing metadata such as timestamps, file sizes, and paths.
  • According to the article, worker nodes can read and update a target’s index concurrently, allowing scan workloads to move between nodes without transferring index state.
  • Incremental scans identify new or modified assets for inspection and bypass unchanged content, which the vendor says reduces redundant processing and network and I/O use.
  • Organizations can add worker nodes to increase scan throughput; the article describes this as enabling linear scaling.
  • The management console reports items fully inspected, incrementally bypassed, or excluded by scan filters, and administrators can reset an individual target’s index.

Article Details

Event Type
Product capability overview of Symantec DLP High Speed Discovery
Impact
The article says the shared incremental index lets worker nodes identify unchanged files and focus repeat scans on new, modified, or moved content. It claims this can reduce redundant processing and network transfers, support scaling by adding worker nodes, and provide scan telemetry for compliance audits. No security incident or measured performance results are reported.

Vendors

Products

Related Articles