Scan Items tab

Option definitions

Configure detection options. If you are configuring different scanning policies for default, low-risk, and high-risk processes, the options on this tab must be configured for each process type.

Option Definition
Settings for Select Workstation or Server from the drop-down list.
Note: This option is only available via ePolicy Orchestrator.
Scan files
  • When writing to disk — Scan all files as they are written to or modified on the computer or other data storage device.

    If you are copying or moving files from one computer to another, it is important that all computers be configured identically so that a file with a potential threat can’t be copied from or written to a computer.


  • When reading from disk — Scan all files as they are read from the computer or other data storage device.
  • On network drives — Scan resources on mapped network drives.

    Scanning network resources might affect performance.


  • Opened for backup — Examine files that are open for backup operations.
File types to scan
  • All files — Scan all files regardless of extension.
  • Default + additional file types — Scan the default list of extensions plus any additions you specify. The default list is defined by the current DAT file.

    Also scan for macros in all files — If you selected this optopn, you can also search for known macro threats in all files.


  • Specified file types only — Create a list of user-specified extensions to be scanned. You can also remove any extensions you added previously.

    Select this option, then enter file extensions separated by spaces in the text box.

Heuristics
  • Find unknown program threats and Trojans — Use heuristic scanning to detect executable files that have code resembling malware.
  • Find unknown macro threats — Use heuristic scanning to detect unknown macro viruses.
Compressed files
  • Scan inside archives — Examine archive (compressed) files and their contents.
  • Decode MIME encoded files — Detect, decode, and scan Multipurpose Internet Mail Extensions (MIME) encoded files.
Note: Although it provides better protection, scanning compressed files can increase the time required to perform a scan.
Unwanted programs detection
  • Detect unwanted programs — Enables the on-access scanner to detect potentially unwanted programs.

    The scanner uses the information you configured in the Unwanted Programs Policy to detect potentially unwanted programs.

    See Restricting Potentially Unwanted Programs for more information.