If you are switching Trend Vision One Endpoint Security agents from conventional scan to smart scan, ensure that you have set
up Smart Protection Services on the Apex One server. For details, see the Apex One
documentation.
The following table provides other considerations when switching Trend Vision One Endpoint Security agent to smart
scan.
Considerations When Switching to Smart Scan
Consideration
|
Details
|
||
Product license
|
To use smart scan, ensure that you have activated the licenses for the
following services on the Apex One server and that the licenses are not expired:
|
||
Apex One (Mac) server
|
Ensure that Trend Vision One Endpoint Security agents can connect to the Apex One (Mac) server. Only online Trend Vision One Endpoint Security agents will be
notified to switch to smart scan. Offline Trend Vision One Endpoint Security agents get
notified when they become online. Roaming Trend Vision One Endpoint Security agents are
notified when they become online or, if the Trend Vision One Endpoint Security agent has
scheduled update privileges, when scheduled update runs.
|
||
Number of Trend Vision One Endpoint Security agents to switch
|
Switching a relatively small number of Trend Vision One Endpoint Security agents at a
time allows efficient use of Apex One (Mac) server resources. The Apex One (Mac) server
can
perform other critical tasks while Trend Vision One Endpoint Security agents change their scan methods.
|
||
Timing
|
When switching to smart scan for the first time, Trend Vision One Endpoint Security agents need to
download the full version of the Mac Heuristic Pattern and Smart Scan Agent Pattern
from the
Apex One (Mac) server. The Smart Scan Pattern is only used by smart scan agents.
Consider switching during off-peak hours to ensure the download process
finishes within a short amount of time. Also consider switching when no Trend Vision One Endpoint Security agent is
scheduled to update from the server.
|
||
Agent tree settings
|
Scan method is a granular setting that can be set on the root, group, or
individual agent level. When switching to smart scan, you can:
|
||
IPv6 support
|
Smart scan agents send scan queries to smart protection sources.
A pure IPv6 smart scan agent cannot send queries directly to pure IPv4
sources, such as:
Similarly, a pure IPv4 smart scan agent cannot send queries to pure IPv6
Smart Protection Servers.
A dual-stack proxy server that can convert IP addresses, such as DeleGate, is
required to allow smart scan agents to connect to the sources.
|