Agent Icons

Icons on the endpoint’s system tray indicate the agent’s status and the task it is currently running.

Icon Color Description



Red

The agent is up and running and is connected to its parent server. In addition, any of the following is true:

  • The product license has been activated.

  • The product license (full or evaluation version) has been activated but has expired. Some agent features will not be available if the license has expired. For details, see Managing Licenses.



Gray

The agent is up and running but is disconnected from its parent server.



Red

The agent is scanning for security risks and is connected to its parent server.



Gray

The agent is scanning for security risks but is disconnected from its parent server. If the agent detects security risks during scanning, it will send the scan results to the server only when the connection is restored.



Red

The agent is updating components from its parent server.



Gray

The agent is updating components from the Trend Micro ActiveUpdate server because it cannot connect to its parent server.



Gray

This icon indicates any of the following conditions:

  • The agent has been registered to its parent server but the product license has not been activated. Some agent features will not be available if the license has not been activated. For details, see Managing Licenses.

  • The agent has not been registered to its parent server. The product license may or may not have been activated.

    If a agent is not registered to its parent server:

    • Real-time Scan is enabled but the action on security risks is always "Pass".

    • Manual Scan, Scheduled Scan, Web Reputation, and pattern updates are disabled.

  • The agent has been registered to its parent server. The product license is for an evaluation (trial) version of the product and has been activated. However, the evaluation version license has expired. Some agent features will not be available if the license has expired. For details, see Managing Licenses.