Threat Mitigator leverages Trend Micro smart scan technology during routine mitigation tasks. Smart scan technology is a next-generation, in-the-cloud based endpoint protection solution. At the core of this solution is an advanced scanning architecture that leverages threat signatures stored in-the-cloud.
Threat Mitigator also uses smart scan during On-demand Scan.
In place of the conventional Virus Pattern, Threat Mitigator downloads and updates a lightweight pattern called Smart Scan Agent Pattern. If this pattern is unable to determine the risk of a file during mitigation, a scan query is sent to a Smart Scan Server. A Smart Scan Server hosts the Smart Scan Pattern, which contains signatures not found on the Smart Scan Agent Pattern and checks whether the file is safe to access. A Smart Scan Server downloads the Smart Scan Pattern from the Trend Micro ActiveUpdate server.
Perform the following tasks to set up a Smart Scan Server:
Install Smart Scan Server 1.0 with Service Pack 1 on a VMware server. Only one Smart Scan Server can be used in this Threat Mitigator version. For installation instructions and requirements, refer to the Trend Micro Smart Scan Getting Started Guide.
If you have previously installed a Smart Scan Server for use with another Trend Micro product (such as OfficeScan), you can use the Smart Scan Server for threat mitigation. While Smart Scan Server can be queried simultaneously by multiple Trend Micro products, it may become overloaded as the volume of scan queries increases. Ensure that the Smart Scan Server can handle scan queries coming from different products. Contact your support provider for sizing guidelines and recommendations.
On the Threat Mitigator console's Smart Scan Server screen:
Specify the Smart Scan Server's URL. Endpoints use the URL when connecting to the server. You can find the URL from the Smart Scan Server console.
Configure endpoints that cannot connect to the Smart Scan Server to send scan queries to the Trend Micro Global Smart Scan Server. Internet connection is required to connect to this server.