The Trend Micro scan engine uses both rule-based and pattern recognition technologies
and includes MacroTrap technology, which detects and removes macro viruses. Frequent,
automatic virus pattern and scan engine updates occur through a Web-based download
mechanism, which does not require a shutting down ScanMail.
ScanMail scans and cleans attachments and document content on all entry points, as
illustrated in the following figure:
-
Email attachments are scanned in real time at the Domino mail server.
-
Database events are monitored and attachments are scanned immediately before a document is closed.
-
Databases and modified data are scanned during replication.
-
Existing attachments in mailboxes and Domino databases are scanned to root out old infections.
ScanMail maintains a comprehensive activity log, detailing the following for each
infected file:
-
the origin, name, and destination of the file
-
date the file was received
-
identity of any virus found
-
the action taken
Java-based charts help administrators identify virus infections throughout the enterprise
environment. Reports from different servers can be consolidated through Notes database
replication.