An OfficeScan client uses
the Smart Scan Agent Pattern to scan for security risks and only
queries the Smart Scan Pattern if the Smart Scan Agent Pattern cannot
determine the risk of a file. The client queries
the Web Blocking List when a user attempts to access a website.
Advanced filtering technology enables the client to
"cache" the query results. This eliminates the need to send the
same query more than once.
Clients that
are currently in your intranet can connect to a Smart Protection
Server to query the Smart Scan Pattern or Web Blocking List. Network connection
is required to connect to the Smart Protection Server. If more than one
Smart Protection Server has been set up, administrators can determine
the connection priority.
![Tip](resources/tip.png) |
Tip
Install several Smart Protection Servers to
ensure the continuity of protection in the event that connection
to a Smart Protection Server is unavailable.
|
Clients that
are currently not in your intranet can connect to Trend Micro Smart
Protection Network for queries. Internet connection is required
to connect to the Smart Protection Network.
Clients without
access to the network or the Internet still benefit from protection
provided by the Smart Scan Agent Pattern and the cache containing previous
query results. The protection is reduced only when a new query is necessary
and the client, after repeated
attempts, is still unable to reach any smart protection source.
In this case, a client flags
the file for verification and temporarily allows access to the file.
When connection to a smart protection source is restored, all the
files that have been flagged are re-scanned. Then, the appropriate
scan action is performed on files that have been confirmed as a
threat.
The following table summarizes the extent of protection based
on the client’s location.
Protection
Behaviors Based on Location
|
-
Pattern file: Clients download
the Smart Scan Agent Pattern file from the OfficeScan server or
a custom update source.
-
File and web reputation queries: Clients connect
to the Smart Protection Server for queries.
|
Without access to the intranet but with connection
to Smart Protection Network
|
-
Pattern file: Clients do not
download the latest Smart Scan Agent Pattern file unless connection
to an OfficeScan server or a
custom update source is available.
-
File and web reputation queries: Clients connect
to Smart Protection Network for queries.
|
Without access to the intranet and without connection
to Smart Protection Network
|
-
Pattern file: Clients do not
download the latest Smart Scan Agent Pattern file unless connection
to an OfficeScan server or a
custom update source is available.
-
File and web reputation queries: Clients do not receive
query results and must rely on the Smart Scan Agent Pattern and
the cache containing previous query results.
|