Selecting a Scan Method Parent topic

IMSVA provides two scanning methods for detection of malware and other security threats.

Procedure

  1. Go to Policy → Smart Protection.
    The Security Risk Scan tab appears by default.
  2. Select one of the following malware scanning methods.
    • Conventional Scan: Conventional scan leverages anti-malware and antispyware components stored locally.
      The Virus Pattern contains information that helps IMSVA identify the latest virus/malware and mixed threat attacks. Trend Micro creates and releases new versions of the Virus Pattern several times a week, and any time after the discovery of a particularly damaging virus/malware.
    • Smart Scan - File Reputation Services: Smart Scan leverages threat signatures that are stored in the cloud.
      When in Smart Scan mode, IMSVA uses the Smart Scan Agent Pattern to check for security risks. The Smart Scan Agent Pattern is updated daily by Trend Micro and delivers the same protection provided by conventional anti-malware and antispyware patterns. If the Smart Scan Agent Pattern cannot determine the reputation of a file, IMSVA queries the Smart Protection Network to provide up-to-date protection.
    Note
    Note
    Conventional Scan is the default scan method.
  3. If you selected Smart Scan - File Reputation Services, select one of the following smart protection sources:
    • Smart Protection Network: If you select this option, specify the proxy server setting.
    • Smart Protection Server: If you select this option, click the Local Sources tab and configure Smart Protection Servers.
    Note
    Note
    IMSVA reverts to Conventional Scan when the selected Smart Protection Network or Smart Protection Server is unavailable. IMSVA can switch to Conventional Scan only when you have selected Switch to Conventional Scan when Smart Protection Network or Smart Protection Server is unavailable.
  4. Click Save.
    Note
    Note
    If Smart Scan is selected, IMSVA attempts to connect to the Smart Protection Network or Smart Protection Server immediately after you click Save. If a connection is not established, IMSVA does not save your settings. Reselect a scan method and save your settings again.
    IMSVA automatically restarts the Scan Service whenever you change your scan method settings.
When IMSVA reverts to Conventional Scan, you can query system event logs for each scanner's connection timeouts. If any scanner has frequent connection timeouts, check the network configuration of that scanner. For details on querying system event logs, see Querying System Event Logs.
You can configure IMSVA to send notifications for scan method changes. For details on configuring notifications, see Configuring Event Criteria and Notification Message.