Malware scan configurations are reusable saved settings that you can apply when configuring Anti-Malware in a policy or for a computer. A malware scan configuration specifies what types of malware scanning Server & Workload Protection performs and which files it scans. Some policy properties also affect the behavior of malware scans.
Tip
Tip
CPU usage and RAM usage varies by your Anti-Malware configuration. To optimize Anti-Malware performance on the agent, see Performance tips for Anti-Malware.
The following steps provide an overview on how to configure malware scans on your endpoints. Use the links in each step to view detailed information on how to configure the malware scan features.
  1. Create or edit a malware scan configuration.
  2. Test the configured malware scan.
    Server & Workload Protection provides a default set of scan settings when you create a malware scan. Test the scan before proceeding with further configuration to ensure the scan is working and the agent is communicating with Server & Workload Protection.
  3. Configure malware scanning capabilities and features. You can configure the following features:
    For more information about security features and configurations, see:
  4. If you want to let your macOS users trigger a manual scan using the agent notifier app, enable the manual scan from notifier app feature.
  5. Configure the files and locations you want to scan.
    For information about formatting for malware scans, see Syntax for inclusions and exclusions.
  6. Specify when real-time scans occur.
  7. Configure how to handle malware.
  8. Configure whether to identify malware by hash digest.
  9. Enable or disable notifications on the endpoint device.
  10. Specify whether to run scheduled scans if the agent is unable to communicate with Server & Workload Protection.
If you experience any issues with your malware scan settings, review the troubleshooting information.
Related information