Creating an Event-Based On-Demand Scan

To create an event-based malware scan for all host endpoints:

Important

Your on-demand malware scans are not saved to your Malware Scans policy until you click Save.

From the Admin menu, select Policies to access the Policies page.
In the Policies table, click the Agent Default Policy link to access the Edit Policy page.
Select the Malware Scans tab.
In the Malware Scans section, verify that the Scheduled Scans ON/OFF switch is turned ON.
In the Malware Scans section, click Create Scan to access the Create Scan window.
In the Scan Name field, enter the name of your scheduled scan. Scan names are restricted to 70 alphanumeric characters or less and can include a combination of dashes, spaces, and underscores.
In the scan event drop-down, Select Event to create an event-based malware scan.
Select the event type. Valid options include:
- Signature update: This is the default option. Signature update scans start when the agent receives malware signature updates.
- Boot: Boot scans start when the host endpoint boots or reboots.
- Scan on USB Insert: Scan on USB Insert automatically scans a USB drive when it is connected to the host.
  Select one of the following options:
  - Full Scan: to recursively scan all files in the root directory and its sub-folders.
  - Quick Scan: to non-recursively scan all files in the root directory excluding any files in the sub-folders.
In the Scan will have the following depth section, select the scan depth. Options include Full and Active Memory.
Click Create to create your on-demand malware scan.
Click Save to save your on-demand malware scan to the Malware Scans policy.

Important

To use the Scan on USB Insert option, you must use the Scan On Install toggle on the Malware Scans Policy page to enable the feature.

To create an event-based malware scan for select host sets:

Note

See Creating a Custom Policy for more information about using the Web UI to create a custom policy.

From the Admin menu, select Policies to access the Policies page.
In the Policies table, click the link for the custom policy you want to modify.
Select the Malware Scans tab.
In the Malware Scans section, verify that the Scheduled Scans ON/OFF switch is turned ON.
In the Malware Scans section, click Create Scanto access the Create Scan window.
In the Scan Name field, enter the name of your scheduled scan. Scan names are restricted to 70 alphanumeric characters or less and can include a combination of dashes, spaces, and underscores.
In the scan event drop-down, Select Event to create an event-based malware scan.
Select the event type. Valid options include:
- Signature update: This is the default option. Signature update scans start when the agent receives malware signature updates.
- Boot: Boot scans start when the host endpoint boots or reboots.
- Scan on USB Insert: Scan on USB Insert automatically scans a USB drive when it is connected to the host. You can use Full Scan to examine all files and folders on the drive.
  Important
  To use the Scan on USB Insert option, you must use the Scan On Install toggle on the Malware Scans Policy page to enable the feature.
In the Scan will have the following depth section, select the scan depth. Options include Full and Active Memory.
Click Create to create your on-demand malware scan.
Click Save to save your on-demand malware scan to the Malware Scans policy.
Important
Your on-demand malware scans are not saved to your Malware Scans policy until you click Save.

Now you can assign host sets to the custom policy and set the policy priority level. See Assigning Host Sets to Agent Policies and Configuring Policy Priority Using the Web UI for more information.