Security Agent Icons

The Security Agent icon in the system tray provide visual hints that indicate the current status of the Security Agent and prompt users to perform certain actions. At any given time, the icon will show a combination of the following visual hints.

Security Agent Status as Indicated in the Security Agent Icon

Agent Status	Description	Visual Hint
Agent connection with the Trend Micro Apex One server	Online agents are connected to the Trend Micro Apex One server. The server can initiate tasks and deploy settings to these agents	The icon contains a symbol resembling a heartbeat. The background color is a shade of blue or red, depending on the status of the Real-time Scan Service.
	Offline agents are disconnected from the Trend Micro Apex One server. The server cannot manage these agents.	The icon contains a symbol resembling the loss of a heartbeat. The background color is a shade of blue or red, depending on the status of the Real-time Scan Service.
	Independent agents may or may not be able to communicate with the Trend Micro Apex One server.	The icon contains the desktop and signal symbols. The background color is a shade of blue or red, depending on the status of the Real-time Scan Service.
Availability of smart protection sources	Smart protection sources include Smart Protection Servers and Trend Micro Smart Protection Network. Conventional scan agents connect to smart protection sources for web reputation queries. Smart scan agents connect to smart protection sources for scan and web reputation queries.	The icon includes a check mark if a smart protection source is available.
		The icon includes a progress bar if no smart protection source is available and the agent is attempting to establish connection with the sources.
		For conventional scan agents, no check mark or progress bar appears if web reputation has been disabled on the agent.
Real-time Scan Service status	Trend Micro Apex One uses the Real-time Scan Service not only for Real-time Scan, but also for Manual Scan and Scheduled Scan. The service must be functional or the agent becomes vulnerable to security risks.	The entire icon is shaded blue if the Real-time Scan Service is functional. Two shades of blue are used to indicate the of the agent. For conventional scan: For smart scan:
Real-time Scan Service status		The entire icon is shaded red if the Real-time Scan Service has been disabled or is not functional. Two shades of red are used to indicate the scan method of the agent. For conventional scan: For smart scan:
Real-time Scan status	Real-time Scan provides proactive protection by scanning files for security risks as they are created, modified, or retrieved.	There are no visual hints if Real-time Scan is enabled.
Real-time Scan status		The entire icon is surrounded by a red circle and contains a red diagonal line if Real-time Scan is disabled.
Pattern update status	Agents must update the pattern regularly to protect the agent from the latest threats.	There are no visual hints if the pattern is up-to-date or is slightly out-of-date.
Pattern update status		The icon includes an exclamation mark if the pattern is severely outdated. This means that the pattern been not been updated for a while.
Trend Micro Apex One server trial license status	Online agents are connected to an Trend Micro Apex One server that is using an expired trial license.	This icon indicates that the trial license on the Trend Micro Apex One server has expired.