The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

Enable or disable On-Access Scan

  • Published on Sep 13, 2026
  • 1 minute(s) read
Prev Next

Enable or disable On-Access Scan as required.

  1. Log on to the system as a user with administrator rights.

  2. Navigate to the default or custom directory. For example:

    cd /opt/McAfee/ens/tp/bin

  3. Enable or disable the scan:

    • Enable On-Access Scan: ./mfetpcli --setoasglobalconfig --oas on

    • Disable On-Access Scan: ./mfetpcli --setoasglobalconfig --oas off

Related articles
  • Verify the status of the on-access scan
    Endpoint Security (ENS) > ENS 26.x > Trellix Endpoint Security (ENS) 26.x - Threat Prevention Product Guide - Linux > Managing Endpoint Security (ENS) for Linux tasks > Manage on-access scanning
  • Configure the On-Access Scan settings for a Standard process type
    Endpoint Security (ENS) > ENS 26.x > Trellix Endpoint Security (ENS) 26.x - Threat Prevention Product Guide - Linux > Managing Endpoint Security (ENS) for Linux tasks > Manage on-access scanning
  • Disable Trellix GTI for On-Access Scan
    Endpoint Security (ENS) > ENS 26.x > Trellix Endpoint Security (ENS) 26.x - Threat Prevention Product Guide - Linux > Managing Endpoint Security (ENS) for Linux tasks > Protecting Linux endpoints using Trellix GTI > Configure Trellix GTI settings for On-Access Scan and On-Demand Scan