If you are switching agents from conventional scan to smart scan, ensure that you
have set up Smart Protection Services.
For details, see Setting Up Smart Protection Services.
The following table provides other considerations when switching to smart scan.
Considerations When Switching to Smart Scan
Consideration
|
Details
|
||
Product license
|
To use smart scan, ensure that you have
activated the licenses for the following services and that the licenses
are not expired:
|
||
Trend Micro Apex One server
|
Ensure that agents can connect to the Trend Micro Apex One server. Only online agents will be
notified to switch to smart scan. Offline agents get notified when
they become online. Independent agents are notified when they become
online or, if the agent has scheduled update privileges, when
scheduled update runs.
Also verify that the Trend Micro Apex One server has the latest components
because smart scan agents need to download the Smart Scan Agent
Pattern from the server.
To update components, see Trend Micro Apex One Server Updates.
|
||
Number of agents to switch
|
Switching a relatively small number of agents at a time allows efficient use of Trend Micro Apex One
server resources. The Trend Micro Apex One server can perform other critical tasks
while agents change their scan methods.
|
||
Timing
|
When switching to smart scan for the first time, agents need to download the full
version of the Smart Scan Agent Pattern from the Trend Micro Apex One
server. The Smart Scan Pattern is only used by smart scan
agents.
Consider switching during off-peak hours to ensure the download process finishes
within a short amount of time. Also consider switching when no agent
is scheduled to update from the server. Also temporarily disable
"Update Now" on agents and re-enable it after the agents have
switched to smart scan.
|
||
Agent
tree settings
|
Scan method is a granular setting that can be set on the root, domain, or individual
agent level. When switching to smart scan, you can:
|
||
IPv6 support
|
Smart scan agents send scan queries to smart protection sources.
A pure IPv6 smart scan agent cannot send queries directly to pure IPv4 sources, such
as:
Similarly, a pure IPv4 smart scan agent cannot send queries to pure IPv6 Smart
Protection Servers.
A dual-stack proxy server that can convert IP addresses, such as DeleGate, is
required to allow smart scan agents to connect to the sources.
|