The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Threat Prevention policy

Prev Next

Threat Prevention checks for malware and other threats by scanning items on your managed systems.

Use Trellix ENS Threat Prevention policy to configure scanning settings for your managed systems.

Product

Category

Available options

Endpoint Security Threat Prevention

On-access Scan

  • Enable or disable on-access scanning on managed systems.

  • Specify time limit to scan each file.

  • Specify when to scan files.

  • Scan specific types of files.

  • Define actions for detected items and unwanted programs.

  • Exclude files and directories.

On-demand Scan

  • Run full scan and quick scan on managed systems.

  • Scan specific directories and their subdirectories.

  • Scan specific types of files.

  • Define actions for detected items and unwanted programs.

  • Exclude files and directories from scanning.

    Note

    When you manage your Mac using the ePO - On-prem server, you can see two additional tabs Full Scan (Read only) and Quick Scan (Read only) under the On-demand Scan tab. These two tabs correspond to the Full Scan and Quick Scan tabs of Trellix ENS Threat Prevention extension on the ePO - On-prem server. These two are read-only tabs and display the On-demand scan settings configured on the ePO - On-prem server.