Automatic Update

Automatic update relieves you of the burden of notifying all clients to update and eliminates the risk of client computers not having up-to-date components.

In addition to components, OfficeScan clients also receive updated configuration files during automatic update. Clients need the configuration files to apply new settings. Each time you modify OfficeScan settings through the Web console, the configuration files change. To specify how often configuration files are applied to clients, see step 3 below.

You can configure clients to use proxy settings during automatic update. See Proxy for Client Component Update for details.

There are two types of automatic update:

Event-triggered Update

The server can notify online clients to update components after it downloads the latest components, and offline clients when they restart and then connect to the server. Optionally initiate Scan Now (manual scan) on client computers after the update.

If the OfficeScan server is unable to successfully send an update notification to clients after it downloads components, it automatically resends the notification after 15 minutes. The server continues to send update notifications up to a maximum of five times until the client responds. If the fifth attempt is unsuccessful, the server stops sending notifications. If you select the option to update components when clients restart and then connect to the server, component update will still proceed.

Schedule-based Update

Running scheduled updates is a privilege. You need to first select clients that will have the privilege and these clients will then run updates based on the schedule.

To use schedule-based update with Network Address Translation, see Client Scheduled Update with NAT.

To update networked computer components automatically: >>>

Updates > Networked Computers > Automatic Update

Select the events that will trigger component update.

Event-triggered update options

Option	Description
Initiate component update on clients immediately after the OfficeScan server downloads a new component	The server notifies clients to update as soon as it completes an update. Frequently updated clients only need to download incremental patterns, thus reducing the time it takes to complete the update (see Server Component Duplication for details about incremental patterns). However, updating frequently may adversely affect the server’s performance, especially if you have a large number of clients updating at the same time. If you have clients on roaming mode and you want these clients to update as well, select Include roaming and offline client(s). See Roaming Clients for details about roaming mode.
Let clients initiate component update when they restart and connect to the OfficeScan server (roaming clients are excluded)	A client that missed an update immediately downloads components when it establishes connection with the server. A client may miss an update if it is offline or if the computer where it is installed is not up and running.
Perform Scan Now after updating (excluding roaming clients)	The server notifies clients to scan after an event-triggered update. Consider enabling this option if a particular update is a response to a security risk that has already spread within the network.

Select how often clients with scheduled update privilege will perform scheduled update.

If you have granted clients scheduled update privilege, proceed to the next step.

If you have not granted clients scheduled update privilege, perform the following steps first:

Go to Networked Computers > Client Management and select the clients that you want to have the privilege.
Click Settings > Privileges and Other Settings.

Option 1: Under the Privileges tab, go to the Component Update Privileges section. You will see the Enable scheduled update option.

Option 2: Under the Other Settings tab, go to the Update Settings section. You will see another Enable scheduled update option.

If you want to give client users the ability to enable or disable scheduled update on the client console, enable options 1 and 2. After you save the settings, updates will run on the client computer as scheduled. Scheduled updates will only stop running when a client user right-clicks the OfficeScan icon on the system tray and selects Disable scheduled update.

If you want scheduled update to always run and prevent client users from disabling scheduled update, enable option 1 and disable option 2.

Save the settings.

Configure the schedule.

If you select Minute(s) or Hour(s), you have the option to Update client configurations only once per day. If you do not select this option, the OfficeScan client retrieves both the updated components and any updated configuration files available on the server at the interval specified. If you select this option, OfficeScan updates only the components at the interval specified, and the configuration files once per day.

Trend Micro often updates components; however, OfficeScan configuration settings probably change less frequently. Updating the configuration files with the components requires more bandwidth and increases the time OfficeScan needs to complete the update. For this reason, Trend Micro recommends selecting updating client configurations only once per day.

If you select Daily or Weekly, specify the time of the update and the time period the OfficeScan server will notify clients to update components. For example, if the start time is 12pm and the time period is 2 hours, OfficeScan randomly notifies all online clients to update components from 12pm until 2pm. This setting prevents all online clients from simultaneously connecting to the server at the specified start time, significantly reducing the amount of traffic directed to the server.

Click Save.

Offline clients will not be notified. Offline clients that become online after the time period expires can still update components if you selected Let clients initiate component when they restart. under Event-triggered Update. Otherwise, they update components on the next schedule or if you initiate manual update.