Press CTRL+K to open search

Configuring the Malware Protection Indicator Download Channel

  • Published on Sep 8, 2026
  • 2 minute(s) read
Prev Next

Malware protection indicators are used by the Endpoint Security (HX) malware protection engine during malware detection scans. Malware definitions, which include malware protection indicators, are transferred through the channel you select.

The Malware Protection indicator download channel drop-down allows you to select which channel you want to use to download the latest malware definitions, which include malware protection indicators, to the Endpoint Security (HX) Agent. The table below lists the available channels. The Internet is the default channel.

Indicator Source

Description

Internet

Malware protection indicator updates are downloaded directly from the Internet.

HX-Preferred

Malware protection indicator updates are downloaded from the Endpoint Security server. If the Endpoint Security server is unavailable, malware protection indicator updates are downloaded from the Internet.

HX-Only

Malware protection indicator updates are downloaded from the Endpoint Security server only.

Note

When you first enable malware protection, the latest malware definitions are downloaded to your agents. By default, this initial download can take up to four hours to complete. Malware protection will not start until these definitions have been downloaded. To verify that the data has downloaded successfully, review the Host Details tab in the Endpoint Security Web UI for a Windows host. Verify the values in the Content Version and Last Updated fields under Malware Protection on the tab. For more information, see the Endpoint Security (HX) Server User Guide.

: