The company that initially installed our Citrix boxes configured our AV to scan files on creation but turned off scan on file open and execution as they said it can really slow the box down. I'm concerned that this might not be giving us adequate protection.

How do other Citrix users configure their AV?