Configuring Scan Methods

Before you begin

• If agents currently use conventional scan and scanning takes a considerable amount of time to complete, you can switch to smart scan, which was designed to be faster and more efficient. Another instance you might switch to smart scan is when disk space on the agent is running low because smart scan agents download smaller pattern sizes and therefore require less disk space.
  Before switching to smart scan, go to Administration → Global Settings, click the Desktop/Server tab, and go to the General Scan Settings section. Be sure that Disable Smart Scan Service has been disabled.
• Switch agents to conventional scan if you notice a drop in performance in the Security Server, which may signal that it is unable to handle all scan queries from agents in a timely manner.

Considerations When Switching Between Scan Methods

Consideration	Details
Security Server connection	Ensure that Security Agents can connect to the Security Server. Only online agents will be notified to switch to a different scan method. Offline agents get notified when they become online. Also verify that the Security Server has the latest components because agents need to download new components from the Security Server, namely, Smart Scan Agent Pattern for agents that will switch to smart scan and Virus Pattern for agents that will switch to conventional scan.
Number of Security Agents to switch	Switching a relatively small number of Security Agents at a time allows efficient use of Security Server resources. The Security Server can perform other critical tasks while agents change their scan methods.
Timing	When switching Security Agents for the first time, agents need to download the full version of the Smart Scan Agent Pattern (for agents that will switch to smart scan) or Virus Pattern (for agents that will switch to conventional scan). Consider switching during off-peak hours to ensure the download process finishes within a short amount of time. Also temporarily disable "Update Now" on agents to prevent user-initiated updates and re-enable it after the agents have switched scan methods. Note Subsequently, agents will download smaller, incremental versions of the Smart Scan Agent Pattern or Virus Pattern as long as they are updated frequently.
IPv6 support	A pure IPv6 smart scan agent that is offline cannot send queries directly to the Trend Micro Smart Protection Network. A dual-stack proxy server that can convert IP addresses, such as DeleGate, is required to allow the smart scan agent to send queries.