On-access scan configuration includes settings based on process type, and defining messages to send when a threat is detected.
Select Menu → Policy → Policy Catalog, then select Endpoint Security Threat Prevention from the Products list in the left pane.
From the Category list in the right pane, select On-Access Scan.
Click the Edit link for an editable policy.
Click Show Advanced.
Select Enable On-Access Scan to enable the on-access scanner and change options.
Specify whether to use Standard settings for all processes, or different settings for high-risk and low-risk processes.
Use Standard settings for all processes — Configure the scan settings on the Standard tab.
Configure different settings for High Risk and Low Risk processes — Select the tab (Standard, High Risk, or Low Risk) and configure the scan settings for each process type.
Configure settings on the page, then click Save.