Switching from Conventional Scan to Smart Scan

If you are switching agents from conventional scan to smart scan, ensure that you have set up Smart Protection Services. For details, see Setting Up Smart Protection Services.

The following table provides other considerations when switching to smart scan:

Table 1. Considerations When Switching to Smart Scan

Consideration

Details

Product license

To use smart scan, ensure that you have activated the licenses for the following services and that the licenses are not expired:

  • Antivirus

  • Web Reputation and Anti-spyware

OfficeScan server

Ensure that agents can connect to the OfficeScan server. Only online agents will be notified to switch to smart scan. Offline agents get notified when they become online. Roaming agents are notified when they become online or, if the agent has scheduled update privileges, when scheduled update runs.

Also verify that the OfficeScan server has the latest components because smart scan agents need to download the Smart Scan Agent Pattern from the server. To update components, see OfficeScan Server Updates.

Number of agents to switch

Switching a relatively small number of agents at a time allows efficient use of OfficeScan server resources. The OfficeScan server can perform other critical tasks while agents change their scan methods.

Timing

When switching to smart scan for the first time, agents need to download the full version of the Smart Scan Agent Pattern from the OfficeScan server. The Smart Scan Pattern is only used by smart scan agents.

Consider switching during off-peak hours to ensure the download process finishes within a short amount of time. Also consider switching when no agent is scheduled to update from the server. Also temporarily disable "Update Now" on agents and re-enable it after the agents have switched to smart scan.

Agent tree settings

Scan method is a granular setting that can be set on the root, domain, or individual agent level. When switching to smart scan, you can:

  • Create a new agent tree domain and assign smart scan as its scan method. Any agent you move to this domain will use smart scan. When you move the agent, enable the setting Apply settings of new domain to selected agents.

  • Select a domain and configure it to use smart scan. Conventional scan agents belonging to the domain will switch to smart scan.

  • Select one or several conventional scan agents from a domain and then switch them to smart scan.

Note:

Any changes to the domain’s scan method overrides the scan method you have configured for individual agents.

IPv6 support

Smart scan agents send scan queries to smart protection sources.

A pure IPv6 smart scan agent cannot send queries directly to pure IPv4 sources, such as:

  • Smart Protection Server 2.0 (integrated or standalone)

    Note:

    IPv6 support for Smart Protection Server starts in version 2.5.

  • Trend Micro Smart Protection Network

Similarly, a pure IPv4 smart scan agent cannot send queries to pure IPv6 Smart Protection Servers.

A dual-stack proxy server that can convert IP addresses, such as DeleGate, is required to allow smart scan agents to connect to the sources.