Malware Protection Policy Parent topic

You can configure threat protection policies that include: Scan type (real-time and card scan), action taken for malware, number of compression layers to scan, and the File type.
To configure malware protection policy settings, click Policies, then click the policy name, and then click Malware Protection Policy.
  • Scan Types: Mobile Security provides several types of scans to protect mobile devices from malware.
    • Real-time Scan: Mobile Device Agent scans files on mobile devices in real time. If Mobile Device Agent detects no security risk, users can proceed to open or save the file. If Mobile Device Agent detects a security risk, it displays the scan result, showing the name of the file and the specific security risk. Mobile Security will generate a log with the scan result on the mobile device. The scan log is sent and stored on the Mobile Security database.
    • Scan after SD card insert: If you select this option in the Malware Protection Policy screen, Mobile Security scans data on a memory card when the memory card is inserted to a mobile device. This prevents infected files from spreading through memory cards.
    • Scan after pattern update: If you select the this option in the Malware Protection Policy screen, Mobile Security will run an automatic-scan for security threats after successful pattern update on Android mobile devices.
  • Scan Options
    • Action on malware: When malware is detected on a mobile device, Mobile Security can delete or quarantine the infected file. If the file is in use, the operating system may deny access to it.
      • Quarantine—renames and then moves an infected file to the mobile device’s quarantine directory in\TmQuarantine (for Windows Mobile) or {Disk Label}\TmQuarantine (for Symbian OS).
      • Delete—removes an infected file.
      When connected, Mobile Device Agents send malware logs to the Mobile Security server.
      Note
      Note
      Scan actions only apply to Real-time scan.
    • Compression layers to scan: For ZIP or CAB files, you can specify the number of compression layers to scan. If the number of compression in a ZIP/CAB file exceeds this number, Mobile Security will not scan the file. Mobile Security will take no further action unless the appropriate number of compression layers are specified.
      You can select to have Mobile Security scan executable, ZIP/CAB files, or all files on mobile devices.
    • Scan Location: For Android mobile devices, select whether to scan mobile device’s internal memory and/or the inserted SD card. For SymbianMobile Security scans both the mobile device’s internal memory and the inserted SD card.
    • File type: Select the file types to scan on mobile devices.