Real-time database scanning allows ScanMail to monitor all database document modifications
as the documents are opened or updated in real time. ScanMail performs real-time monitoring
on all or selected databases, and scans and filters databases that are designated
for replication to or from other servers.
To maximize efficiency, ScanMail checks only those documents that have been modified
and immediately scans them for malware. After scanning, ScanMail closes the document
and the replicator task proceeds to the next document. Trend Micro uses this method
because it is faster and more precise, which is especially important when Domino performs
replication with remote servers through costly or slow telephone lines.
Real-time database scanning does not interrupt the entire replication process; rather,
it prevents only the infected file from being saved, and replication of subsequent
documents is unaffected.
Real-time database scanning can be time-consuming and processor intensive if your
Domino server includes many databases and thousands of frequently updated files. To
minimize overhead, you might want to activate real-time scanning only for the databases
that are most vulnerable to virus infections. For example, user databases are probably
more vulnerable to virus infections than Domino program databases. Documents and attachments
in user mail files are protected by real-time message scanning and do not need to
be rescanned.
To protect databases that are not modified frequently, use manual or scheduled database
scanning.