Selecting a Scan Method Parent topic

IMSS provides two scanning methods for detection of malware and other security threats.

Procedure

  1. Navigate to Policy → Scan Method.
    The Scan Method screen displays.
  2. Select one of the following malware scanning methods.
    • Smart Scan: Smart Scan leverages threat signatures that are stored in the cloud.
      When in Smart Scan mode, IMSS uses the Smart Scan Agent Pattern to check for security risks. The Smart Scan Agent Pattern is updated daily by Trend Micro and delivers the same protection provided by conventional anti-malware and antispyware patterns. If the Smart Scan Agent Pattern cannot determine the reputation of a file, IMSS queries the Smart Protection Network to provide up-to-date protection.
    • Conventional Scan: Conventional scan leverages anti-malware and antispyware components stored locally.
      The Virus Pattern contains information that helps IMSS identify the latest virus/malware and mixed threat attacks. Trend Micro creates and releases new versions of the Virus Pattern several times a week, and any time after the discovery of a particularly damaging virus/malware.
    Note
    Note
    Conventional Scan is the default scan method.
  3. Optional: Use an HTTP proxy server to connect to the Smart Protection Network. Specify the following:
    • Proxy server address
    • Proxy server port
    • User name
    • Password
  4. Click Save.
    Note
    Note
    IMSS automatically restarts the IMSS Scan Service whenever you change your scan method settings.
If Smart Scan is selected:
  • IMSS attempts to connect to the Smart Protection Network immediately after you click Save. If a connection is not established, IMSS does not save your settings. Reselect a scan method and save your settings again.
  • If there are ten (10) connection timeouts to the Smart Protection Network in three (3) minutes, IMSS reverts to Conventional Scan. To use Smart Scan again, go to the Scan Method screen and reselect Smart Scan.
    Note
    Note
    When IMSS reverts to Conventional Scan, you can query system event logs for each scanner's connection timeouts. If any scanner has frequent connection timeouts, check the network configuration of that scanner. For details on querying system event logs, see Querying System Event Logs.
  • You can configure IMSS to send notifications for unsuccessful attempts to connect to the Smart Protection Network. For details on configuring notifications, see Notifications.