Views:

The Security Agent icon in the system tray provide visual hints that indicate the current status of the Security Agent and prompt users to perform certain actions. At any given time, the icon will show a combination of the following visual hints.

Table 1. Security Agent Status as Indicated in the Security Agent Icon

Agent Status

Description

Visual Hint

Agent connection with the Apex One server

Online agents are connected to the Apex One server. The server can initiate tasks and deploy settings to these agents

The icon contains a symbol resembling a heartbeat.

The background color is a shade of blue or red, depending on the status of the Real-time Scan Service.

Offline agents are disconnected from the Apex One server. The server cannot manage these agents.

The icon contains a symbol resembling the loss of a heartbeat.

The background color is a shade of blue or red, depending on the status of the Real-time Scan Service.

It is possible for the agent to become offline even if it is connected to the network. For details about this issue, see Solutions to Issues Indicated in Security Agent Icons.

Independent agents may or may not be able to communicate with the Apex One server.

The icon contains the desktop and signal symbols.

The background color is a shade of blue or red, depending on the status of the Real-time Scan Service.

For details about Independent mode agents, see Security Agent Independent Mode Privilege.

Availability of smart protection sources

Smart protection sources include Smart Protection Servers and Trend Micro Smart Protection Network.

Conventional scan agents connect to smart protection sources for web reputation queries.

Smart scan agents connect to smart protection sources for scan and web reputation queries.

The icon includes a check mark if a smart protection source is available.

The icon includes a progress bar if no smart protection source is available and the agent is attempting to establish connection with the sources.

For details about this issue, see Solutions to Issues Indicated in Security Agent Icons.

For conventional scan agents, no check mark or progress bar appears if web reputation has been disabled on the agent.

Real-time Scan Service status

Apex One uses the Real-time Scan Service not only for Real-time Scan, but also for Manual Scan and Scheduled Scan.

The service must be functional or the agent becomes vulnerable to security risks.

The entire icon is shaded blue if the Real-time Scan Service is functional. Two shades of blue are used to indicate the of the agent.

  • For conventional scan:

  • For smart scan:

The entire icon is shaded red if the Real-time Scan Service has been disabled or is not functional.

Two shades of red are used to indicate the scan method of the agent.

  • For conventional scan:

  • For smart scan:

For details about this issue, see Solutions to Issues Indicated in Security Agent Icons.

Real-time Scan status

Real-time Scan provides proactive protection by scanning files for security risks as they are created, modified, or retrieved.

There are no visual hints if Real-time Scan is enabled.

The entire icon is surrounded by a red circle and contains a red diagonal line if Real-time Scan is disabled.

For details about this issue, see Solutions to Issues Indicated in Security Agent Icons.

Pattern update status

Agents must update the pattern regularly to protect the agent from the latest threats.

There are no visual hints if the pattern is up-to-date or is slightly out-of-date.

The icon includes an exclamation mark if the pattern is severely outdated. This means that the pattern been not been updated for a while.

For details on how to update agents, see Security Agent Updates.

Apex One server trial license status

Online agents are connected to an Apex One server that is using an expired trial license.

This icon indicates that the trial license on the Apex One server has expired.