The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

Verify the status of the on-access scan

  • Published on Sep 13, 2026
  • 1 minute(s) read
Prev Next

Check whether the on-access scanning is enabled.

  1. Log on to the system as a user with administrator rights.

  2. Change directory to the /bin folder of the software.

    cd /opt/McAfee/ens/tp/bin

  3. Get details about the on-access scan task configuration.

    ./mfetpcli --getoasconfig --summary

  4. From the command results, check whether the value for the On-Access Scan is Enabled or Disabled.

    Note

    You can verify the value for the on-access scan using kernel mode or fanotify mode.

Related articles
  • Enable or disable On-Access Scan
    Endpoint Security (ENS) > ENS 26.x > Trellix Endpoint Security (ENS) 26.x - Threat Prevention Product Guide - Linux > Managing Endpoint Security (ENS) for Linux tasks > Manage on-access scanning
  • Check the status of an on-demand scan status
    Endpoint Security (ENS) > ENS 26.x > Trellix Endpoint Security (ENS) 26.x - Threat Prevention Product Guide - Linux > Managing Endpoint Security (ENS) for Linux tasks > Manage on-demand scanning
  • View on-demand scan activity logging status on managed systems
    Endpoint Security (ENS) > Trellix Endpoint Security (ENS) 26.x Product Guide - Windows > Managing with Trellix ePO - On-prem > Managing Threat Prevention > Enabling activity logging for on-demand scan > Configure on-demand scanning activity logging for managed systems