Antivirus Features and Scan Types Parent topic

Antivirus Features and Scan Types

Feature
Benefit
Powerful and Creative Antivirus Features
  • SMTP scanning (Transport scanning) and store level scanning.
  • Leverage Microsoft Virus Scanning API to scan messages at a low-level in the Exchange store.
  • Quickly scan messages using multi-threaded in-memory scanning.
  • Detect and take action against viruses/malware, Trojans, and worms.
  • Detect and take action against spyware/grayware.
  • Use true file type recognition to detect falsely labeled files.
  • Use Trend Micro recommended actions or customize actions against viruses/malware.
  • Detect all macro viruses/malware and remove them or use heuristic rules to remove them.
  • Advanced Threat Scan Engine (ATSE)
The Advanced Threat Scan Engine (ATSE) uses a combination of pattern-based scanning and heuristic scanning to detect document exploits and other threats used in targeted attacks.
  • IntelliTrap
This version of ScanMail incorporates IntelliTrap technology. Use IntelliTrap to scan for packing algorithms to detect packed files. Enabling IntelliTrap allows ScanMail to take user-defined actions on infected attachments and to send notifications to senders, recipients, or administrators.
  • Trust Scan
Real-time scan can skip scanning email messages at the store level when the message has been scanned by ScanMail at the Hub Transport Level.
Once ScanMail scans a message on an Edge or Hub Transport server, ScanMail adds scan information to the message. When the message reaches the Mailbox, ScanMail evaluates the scan information to prevent redundant use of resources. ScanMail only scans the message if the message was scanned with an older scan engine or pattern file or if ScanMail has not previously scanned the message.
  • A Category for Unscannable Message Parts
ScanMail separates the unscannable message count from the virus/malware count. Unscannable files can be files that fall outside of the Scan Restriction Criteria, encrypted files, or password protected files.
Manual Scan and Scheduled Scan
ActiveUpdate does not interrupt Manual Scan or Scheduled Scan.
For Exchange Server 2010 and 2007, the Manual Scan and Scheduled Scan pages only appear on Combo Server (Hub Transport and Mailbox server role) and Mailbox server roles. For Exchange Server 2013, these pages appear only for Mailbox server roles. ScanMail provides three incremental scan options:
  • Scan messages delivered during a time period
  • Scan messages with attachments
  • Scan messages that have not been scanned by ScanMail
Smart Scan
Smart scan moves security capabilities from the server to the cloud.
An integral part of the Trend Micro Smart Protection Network, Smart Scan provides the following benefits:
  • Fast, real-time security status lookup capabilities in the cloud
  • Reduces the overall time it takes to deliver protection against emerging threats
  • Lowers memory consumption on endpoints
Updates
  • Receive scheduled or on-demand component updates and customize your update source.