Selecting a Scan Method Parent topic

IMSVA provides two scanning methods for detection of malware and other security threats.

Procedure

  1. Go to Policy → Scan Method.
    The Scan Method screen displays.
  2. Select one of the following malware scanning methods.
    • Smart Scan: Smart Scan leverages threat signatures that are stored in the cloud.
      When in Smart Scan mode, IMSVA uses the Smart Scan Agent Pattern to check for security risks. The Smart Scan Agent Pattern is updated daily by Trend Micro and delivers the same protection provided by conventional anti-malware and antispyware patterns. If the Smart Scan Agent Pattern cannot determine the reputation of a file, IMSVA queries the Smart Protection Network to provide up-to-date protection.
    • Conventional Scan: Conventional scan leverages anti-malware and antispyware components stored locally.
      The Virus Pattern contains information that helps IMSVA identify the latest virus/malware and mixed threat attacks. Trend Micro creates and releases new versions of the Virus Pattern several times a week, and any time after the discovery of a particularly damaging virus/malware.
    Note
    Note
    Conventional Scan is the default scan method.
  3. Optional: Use an HTTP proxy server to connect to the Smart Protection Network. Specify the following:
    • Proxy server address
    • Proxy server port
    • User name
    • Password
  4. Click Save.
    Note
    Note
    IMSVA automatically restarts the Scan Service whenever you change your scan method settings.
If Smart Scan is selected:
  • IMSVA attempts to connect to the Smart Protection Network immediately after you click Save. If a connection is not established, IMSVA does not save your settings. Reselect a scan method and save your settings again.
  • If there are ten (10) connection timeouts to the Smart Protection Network in three (3) minutes, IMSVA reverts to Conventional Scan. To use Smart Scan again, go to the Scan Method screen and reselect Smart Scan.
    Note
    Note
    When IMSVA reverts to Conventional Scan, you can query system event logs for each scanner's connection timeouts. If any scanner has frequent connection timeouts, check the network configuration of that scanner. For details on querying system event logs, see Logs.
  • You can configure IMSVA to send notifications for unsuccessful attempts to connect to the Smart Protection Network. For details on configuring notifications, see Notifications.