Frequently Asked Questions

Answers to some questions on this page are available on the Trend Micro Knowledge Base. Please make sure you have Internet connection to open the Knowledge Base.

Component Updates

What is the maximum number of clients that an Update Agent can manage?

The number depends on the hardware specifications of the Update Agent. However, since the OfficeScan server will only notify 250 OfficeScan clients at a time and keep the notification queue on 250 for the time being, the estimate is one Update Agent will not handle over 250 downloading processes concurrently.

Even on one Update Agent instance, the maximum is 250 update requests.

What is the maximum number of update sources for each OfficeScan client?

The maximum number of update sources is 64. This information is available in the ous.ini file in the \OfficeScan\PCCSRV folder.

What are the alternative options if component update from an Update Agent fails?

The OfficeScan client gets the updates from the OfficeScan server. If the update from the OfficeScan server fails, clients with the privilege can get updates from the ActiveUpdate server.

How can I manually update components?

Refer to the following pages in the Trend Micro Web site for the procedure:

Virus Pattern:http://esupport.trendmicro.com/support/viewxml.do?ContentID=122632

Virus Scan Engine:http://esupport.trendmicro.com/support/viewxml.do?ContentID=122633

Virus Cleanup Engine and Virus Cleanup Template:http://esupport.trendmicro.com/support/viewxml.do?ContentID=123303

Server Management

Which files and folders should I add to the scan exclusion list to prevent problems with Microsoft Exchange and ScanMail for Microsoft Exchange operations?

For Microsoft Exchange

For Microsoft Exchange 2000/2003, you do not need to add folders to the scan exclusion list. Simply go to Networked Computers > Global Client Settings > Virus/Malware Scan Settings and select Exclude Microsoft Exchange server folders from scanning.

If you use Microsoft Exchange 2007, refer to http://technet.microsoft.com/en-us/library/bb332342.aspx for scan exclusion details.

For ScanMail for Microsoft Exchange:

With the exception of version 7, all ScanMail for Microsoft Exchange versions are automatically excluded from scanning. You do not need to manually add these versions' folders to the exclusion list.

If you use version 7, add the following folders to the exclusion list:

Does OfficeScan allow the migration of ServerProtect for Microsoft Windows settings when migrating multiple Normal Servers to the OfficeScan server?

No. In this release, the OfficeScan server inherits the ServerProtect key features like multiple Scheduled Scans and settings during migration.

How can I disable Secure Sockets Layer (SSL)?

Refer to the following page for the procedure: http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-121326&id=EN-121326

Does the OfficeScan server provide authentication when it writes to or reads from CodeBase 6.5?

No. The dbserver.exe process is the only OfficeScan component that interfaces with the CodeBase database. It only accesses the database, and thus does not need to provide a user name and password.

When receiving information (such as component versions) from the OfficeScan client, the OfficeScan server sends the information to Dbserver.exe. The Dbserver.exe then modifies the client record on the database to reflect the component information for the client.

How can I verify that the OfficeScan firewall and Intrusion Detection System are working?

Create a test policy and deploy it to a test computer on your network.

How can I prevent overwriting the OfficeScan client's exception list when I deploy a new firewall profile?

Open the Web console and go to Networked Computers > Firewall > Profiles. In the screen, make sure to disable the option Overwrite client security level/exception list.

Client Management

How can I manually enable remote OfficeScan clients to use roaming mode and receive component updates?

Refer to the following page for the procedure: http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-124309&id=EN-124309

When clients use the LAN only every three to six months, how can OfficeScan administrators update their firewall settings?

Refer to the following page for the procedure: http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1031313&id=EN-1031313

What are offline and inactive clients?

An offline client does not have functional connection with the OfficeScan server. This occurs for various reasons, such as when the client computer is unplugged, disabled, removed, or turned off.

A client becomes "inactive" if it remains offline for a certain number of days. To determine the number of days, open the Web console and go to Administration > Inactive Clients.

Debug Logs

How can I enable debug logging for the OfficeScan server and client?

Refer to the Logs section on the Troubleshooting Resources topic.