Does the System Analysis step in the RSS 2011 Full Restore feature scan all snapshots listed or just the first one on the list?
The System Analysis feature will invoke the Virus Guard component which will only scan the first listed snapshot automatically as it is the most recent one created so is assumed by default to be the most likely one the user will choose. As assumptions are not always valid, the authorized user can select an alternate snapshot and then use the Recheck Snapshot button in the lower left corner of the screen to force the Virus Guard to scan that snapshot before you proceed to the next step. NOTE: Once the scan is complete, you will see the Progress column change to indicate whether it is clean or infected. Further, as soon as a new signature and/or policy update is received, the status for a previously scanned snapshot will revert to indeterminate until/unless a new scan is made with the updated signatures.