About Scan Actions

Scan Actions

Action

Description

Clean

Removes viral code from infected message bodies and attachments. The remaining email message text, any uninfected files, and the cleaned files are deliv­ered to the intended recipient(s).

• Tip: Trend Micro recommends using the default scan action "clean" for viruses/malware.

Under some conditions, ScanMail cannot clean a file. These files are referred to as uncleanable. You can configure ScanMail to take a special action against these files when they are detected.

During a manual or scheduled scan, ScanMail updates the Information Store and replaces the file with the cleaned one.

Replace with text/file

ScanMail deletes the infected, malicious, or undesir­able content and replaces it with text or a file. The email message is delivered to the intended recipient, but the text replacement informs them that the origi­nal content was infected and was replaced.

Quarantine entire message

ScanMail moves the email message to a restricted access folder, removing it as a security risk to the Exchange environment. This option is not available in manual and scheduled scanning.

Quarantine message part

ScanMail moves the email message body or attach­ment to a restricted access folder, removing it as a security risk to the Exchange environment.

ScanMail replaces the message part with the text/file you specify.

Backup

ScanMail backs up the message, delivers, and records the detection in logs.

Delete entire mes­sage

During real-time scanning, ScanMail deletes the entire email message.

The delete action in ScanMail 10.0 and 8.0 differs from that of ScanMail 7.0. ScanMail 7.0 does not have this option for manual scan or scheduled scan.

Pass

ScanMail records the detection in logs and deliver the message.

Pass entire message

ScanMail records the detection in logs and delivers the message.

Pass message part

ScanMail records the detection in logs and delivers the message part.

Tag and deliver

ScanMail adds a tag to the header information of the email message that identifies it as spam and then delivers it to the intended recipient.

Quarantine to user’s spam folder

ScanMail moves the email message to the Spam Mail folder located on the server-side of the Information Store