The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Using sync and async mode

Prev Next

Threat Prevention and Threat Intelligence Exchange now works in sync and async mode.

Threat Prevention is installed in async mode by default. After installing Threat Prevention, you can switch the modes using commands from the terminal.

Running in async mode can result in faster response from applications and provide a better user experience of products. When you run Threat Prevention in async mode, the in-line file access and block file execution run in the deferred mode.

In the in-line access, the software scans the file before opening it and takes appropriate action according to the configuration if it is infected. In deferred mode, the software allows opening files with the scan happening in parallel in the background. The file is allowed only if it is a clean fine. Otherwise, the software takes appropriate scan action according to the configuration.

Differences in functionality with sync and async mode

Here is the difference on how the Threat Prevention and Threat Intelligence Exchange features work when sync mode is enabled and disabled.

Feature

Option

Sync mode

Async mode

On-Access Scan

Scan on Read

GUID-E2AC4ABC-C80C-4319-9ED0-734CC54B11F6-low.png
GUID-E2AC4ABC-C80C-4319-9ED0-734CC54B11F6-low.png

Scan on Write

GUID-E2AC4ABC-C80C-4319-9ED0-734CC54B11F6-low.pngGUID-E2AC4ABC-C80C-4319-9ED0-734CC54B11F6-low.png

Quarantine

GUID-E2AC4ABC-C80C-4319-9ED0-734CC54B11F6-low.pngGUID-E2AC4ABC-C80C-4319-9ED0-734CC54B11F6-low.png

Delete

GUID-E2AC4ABC-C80C-4319-9ED0-734CC54B11F6-low.pngGUID-E2AC4ABC-C80C-4319-9ED0-734CC54B11F6-low.png

In-line access/execution block

GUID-E2AC4ABC-C80C-4319-9ED0-734CC54B11F6-low.png

Available in deferred mode

Scan Action - Deny

GUID-E2AC4ABC-C80C-4319-9ED0-734CC54B11F6-low.png
GUID-8D88B920-1C3C-474E-8F16-5787D0D3E959-low.png

Exclusions

GUID-E2AC4ABC-C80C-4319-9ED0-734CC54B11F6-low.pngGUID-E2AC4ABC-C80C-4319-9ED0-734CC54B11F6-low.png

On-demand scan

Quick Scan

GUID-E2AC4ABC-C80C-4319-9ED0-734CC54B11F6-low.pngGUID-E2AC4ABC-C80C-4319-9ED0-734CC54B11F6-low.png

Full Scan

GUID-E2AC4ABC-C80C-4319-9ED0-734CC54B11F6-low.pngGUID-E2AC4ABC-C80C-4319-9ED0-734CC54B11F6-low.png

Custom Scan

GUID-E2AC4ABC-C80C-4319-9ED0-734CC54B11F6-low.pngGUID-E2AC4ABC-C80C-4319-9ED0-734CC54B11F6-low.png

Exclusions

GUID-E2AC4ABC-C80C-4319-9ED0-734CC54B11F6-low.pngGUID-E2AC4ABC-C80C-4319-9ED0-734CC54B11F6-low.png

Adaptive Threat Protection

In-line access/execution block

GUID-E2AC4ABC-C80C-4319-9ED0-734CC54B11F6-low.png

Available in deferred mode