The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Configure the On-Access Scan settings for a Standard process type

Prev Next

Configure the On-Access Scan settings for a Standard process from the command-line.

  1. Log on to the system as a user with administrator rights.

  2. Navigate to the default or custom directory. For example:

    cd /opt/McAfee/ens/tp/bin

  3. View the current settings of the Standard process type.

    ./mfetpcli --getoasprofileconfig standard

  4. Define the settings for the Standard process type.

    ./mfetpcli --setoasprofileconfig --profile standard [options]

Example: Configure the On-Access Scan Settings (Standard process type)

./mfetpcli --setoasprofileconfig --profile standard --setmode sor --filetypestoscan all --onscanerror deny --onscantimeout deny --networkscan enable --scanarchive disable --scanmime enable --scanunknownprograms enable --scanunknownmacros disable --primaryaction clean --secondaryaction delete --primaryactionpup clean --secondaryactionpup delete

The command configures the following settings for the Standard process type.

  • When to scan — Scan on reading.

  • What to scan — All files.

  • On Scan error — Deny access to the file.

  • On Scan timeout — Deny access to the file.

  • Scan Network volumes — Enable.

  • Scan Archive files — Disable.

  • Scan MIME files — Enable.

  • Detect unwanted programs — Enable.

  • Detect unknown macros — Disable.

  • Threat detection first response — Clean.

  • If first response fails — Delete the file.

  • Unwanted program first response — Clean.

  • If first response fails — Delete.