Threat Prevention settings that apply to all on-access scans and on-demand scans include the quarantine location and potentially unwanted programs.
On-access scan — Configure the on-access scanner in the On-Access Scan settings. When files, folders, and programs are accessed, the on-access scanner intercepts the operation and scans the item, based on criteria defined in the settings.
On-demand scan
Manual
Run a predefined on-demand scan at any time from the Trellix Endpoint Security (ENS) Client by clicking Scan System, then selecting a scan type.
Quick Scan runs a quick check of the areas of the system most susceptible to infection.
Full Scan performs a thorough check of all areas of the system. (Recommended if you suspect the computer is infected.)
Configure the behavior of quick and full scans in the On-Demand Scan policy settings.
Scan an individual file or folder at any time from Windows Explorer by right-clicking the file or folder and selecting Scan for threats from the pop-up menu.
Configure the behavior of the Right-Click Scan in the On-Demand Scan policy settings.
Run a custom on-demand scan as administrator from the Trellix Endpoint Security (ENS) Client:
Select Settings → Common → Tasks.
Select the task to run.
Click Run Now.
Tip
Use manual custom on-demand scans to associate a scan task with a reaction, such as a malware infection.
Configure custom scans in the Custom On-Demand Scan settings from the Client Task Catalog.
Scheduled
When a scheduled on-demand scan is about to start, Endpoint Security displays a scan prompt at the bottom of the screen. You can start the scan immediately or defer the scan, if configured.
Schedule the predefined on-demand scans using the Policy-Based On-Demand Scan client task settings.
Quick Scan — By default, the Quick Scan is enabled and scheduled to run every day at 7 p.m.
Full Scan — By default, the Full Scan is enabled and scheduled to run every Wednesday at 12 midnight.
Tip
Best practice: Use the weekly Full Scan to supplement the continuous protection of the on-access scan. The full scan includes fewer exclusions and actively checks all files for malicious code.
Predefined on-demand scans provide details, such as scan duration, date of last full scan, and compliance status to Trellix ePO - On-prem in the Systems Information Product properties for Endpoint Security.
Configure the behavior of quick and full scans in the On-Demand Scan policy settings.
Schedule custom on-demand scans, using the Custom On-Demand Scan client task settings.
Tip
Use scheduled custom on-demand scans for targeted scans, such as daily memory scans.
Configure custom scans in the Custom On-Demand Scan settings from the Client Task Catalog.
Threat Prevention Options includes settings that apply to all scan types.