Agent settings: Ivanti Mac Antivirus legacy

Ivanti Mac Antivirus legacy features are accessed from the Agent settings tool window (Tools > Security and Compliance > Agent settings). In the Agent settings window, right-click Ivanti Mac Antivirus - Mac legacy, and then click New....

Ivanti Mac Antivirus allows you download and manage antivirus content (virus definition files), configure antivirus scans, and customize antivirus scanner settings that determine how the scanner appears and operates on target devices and which interactive options are available to end users. You can also view antivirus-related information for scanned devices, enable antivirus alerts, and generate antivirus reports.

The main section for Ivanti Mac Antivirus introduces this complementary security management tool, which is a component of both Ivanti® Endpoint Manager and Ivanti® Endpoint Security for Endpoint Manager. In that section you'll find an overview, antivirus content subscription information, as well as step-by-step instructions on how to use Antivirus features.

This section contains help topics that describe the Ivanti Mac Antivirus settings dialog box. From the console interface, access these topics by clicking Help on each dialog box.

About the Ivanti Mac Antivirus Legacy General page

Use this page to configure Ivanti Mac Antivirus scanner settings on target devices.

This page contains the following options:

• Name: Identifies the Antivirus settings with a unique name. This name appears in the settings list on the Antivirus scan task dialog box, on other dialogs, and in the console.
• Protection:
  • File Antivirus: Enables real-time scanning of files on target devices. If you do not enable File Antivirus, the collected statistics appear in the Completed tasks section of the report window. When the component runs, it generates a new report. By default, File Antivirus is enabled and configured with the recommended settings.
• Permissions:
  • Allow user to disable protection components for up to: Specifies the period of time during which the user can pause and stop the protection components listed on the Protection page.
  • Allow user to update definitions: Allows the user to update antivirus definition files.
  • Allow user to restore objects: Allows the user to restore quarantined objects and objects from backup.
  • Allow user to change settings: Allows the user to schedule scans and modify the exclusions and trusted applications lists.
• Set As Default: Establishes the settings on all of the pages of the Ivanti Mac Antivirus dialog box as the default settings. The name you entered will appear in the console with the default icon next to it. You cannot delete a setting that is marked as default. When you create a new agent configuration, those settings will be selected by default. Unless an antivirus scan task has specific antivirus settings associated with it, Ivanti Mac Antivirus will use the default settings during scan and definition file update tasks.

About the Ivanti Mac Antivirus Legacy Protection page

Use this page to configure the way File Antivirus works with Ivanti Mac Antivirus on target devices.

This page contains the following options:

• Enable File antivirus: Enables real-time scanning of files on target devices. If you do not enable File Antivirus, the collected statistics appear in the Completed tasks section of the report window. When the component runs, it generates a new report. By default, File Antivirus is enabled and configured with the recommended settings.
• Security Level: Specifies one of the three file security levels: Maximum protection, Recommended, or Maximum speed. To select a security level, move the slider up or down the scale. If none of the preset security levels meets your needs, you can customize the scan settings by selecting settings on the General, Protection scope, and Additional tabs. This will change the name of the security level to Custom. Select the level closest to your requirements as a basis and then modify its settings.
  

  Maximum protection: Provides the most complete scan of the files you open, save, or start.

  Recommended: Contains the settings recommended by Ivanti, which provides for scan of: programs and objects by content, only new objects and objects modified since the last scan, and embedded OLE objects. This level is set by default.

  Maximum speed: Allows you to comfortably work with applications requiring significant system resources, since the range of files scanned is smaller.
  

• General:
  • File types: Specifies whether to scan all files, scan by content, or scan by extension.
    • Scan all files: Specifies which formats of objects should be scanned for viruses when they are opened, run, or saved.
    • Scan programs and documents (by content): Enables only the scan of potentially infected objects, or files that a virus could penetrate. The internal header of the file is scanned to identify its format (TXT, DOC, EXE, etc.). If the scan reveals that a file of such format cannot be infected, it does not scan it for viruses and immediately makes it accessible to the user. If such format is susceptible to viruses, a scan is performed.
    • Scan programs and document (by extension): Enables only the scan of potentially infected objects, but the file format is determined by its extension. Files without extension are always scanned irrespective of the file type selected.

    NOTE: Do not forget that someone could send a virus to your computer with the .txt extension, although in reality it could be an executable file renamed as a .txt file. If you select the Scan programs and documents (by extension) option, such files will be skipped by the scan. If you select the Scan programs and documents (by content) option, Ivanti Mac Antivirus analyzes the file header, determines that the file has the .exe format and scans it for viruses.

  • Scan new and changed files only: Enables File Antivirus to scan only new files and files that have been modified since the previous scan. This mode applies both to simple and compound files.
  • Scan archives: Enables File Antivirus to scan RAR, ARJ, ZIP, CAB, LHA, JAR, and ICE archives.
  • Scan installation packages: Enables File Antivirus to scan self-extracting archives.
  • Scan embedded objects: Enables File Antivirus to scan documents that are embedded in another file, such as Excel spreadsheets, macros, and email attachments.
  • Postpone extracting if archive larger than: Sets a restriction on the scan of large objects. Any compound file with a size exceeding the specified limit value will be scanned as a single object (its header will be scanned). Objects contained in it will be scanned later. If you do not select this option, access to files larger than the size indicated will be blocked until they have been scanned. This option is enabled by default with the value of 0 MB.
  • Do not process archives larger than: Sets a restriction on large archives. Any compound file with a size exceeding the specified limit value will be skipped without being scanned for viruses. This option is enabled by default with the value of 8 MB.
• Protection scope: Specifies whether to scan all removable drives, all hard drives, or all network drives.
• Additional: Specifies the mode and technology File Antivirus will use and when it will pause.
  • Scan mode: In the default scan mode, Smart mode, File Antivirus scans files by analyzing operations performed with a file by the user, an application, or the operating system. In the On access and modification mode, File Antivirus scans files when the user, an application, or the operating system attempts to open or modify the files. In the On access mode, File Antivirus scans files only when the user, an application, or the operating system attempts to open the files. In the On execution mode, File Antivirus scans files only when the user, an application, or the operating system attempts to run files.
  • iSwift technology: Specifies the scan technology that File Antivirus uses when scanning files. The iSwift technology allows File Antivirus to exclude certain objects from scan using a special algorithm in order to increase the scan speed. The algorithm takes into account the release date of the antivirus databases, the date of the most recent scan of an object, and any changes to the scan settings. This technique works with objects of any format, size, and type.
  • Use heuristic analyzer: This setting defines the depth of heuristic analysis. Scan level ensures the balance between the thoroughness of searches for new threats, the load on the operating system's resources, and the scan time length. To set a scan level, move the slider along the scale.
    •  Optimal protection level: Heuristic analyzer, emulating the operation of the application being scanned, makes as many operations as required to detect a threat with an acceptable probability value. While this process is in progress, the CPU is not overloaded so that it does not impact the performance of other applications. This scan level is set by default.
    •  High protection level: Heuristic analyzer, emulating the operation of the application being scanned, makes as many operations as required to detect a threat with a higher probability value. While this process is in progress, load on the CPU increases, and the scan takes more time.
    •  Maximum protection level: Heuristic analyzer, emulating the operation of the application being scanned, makes as many operations as required to detect a threat with a maximum probability value. While this process is in progress, the scan takes a lot of time and requires significant CPU resources. The performance of other applications is significantly reduced.
• Action: Specifies the action that File Antivirus performs if infected files are detected. Before attempting to disinfect or delete an infected file, File Antivirus creates a backup copy for subsequent restoration or disinfection.
  • Prompt for action: File Antivirus displays a warning message with the information about which malicious code has infected or potentially infected the file, and offers you the selection of further actions. These actions may vary depending on the object's status.
  • Block access: File Antivirus blocks access to an infected or potentially infected object, without moving it to another folder. Information about this is logged in the report under the Detected tab. To gain access, process the objects in the report.
    • Disinfect: Enables automatic disinfection of all infected objects that have been detected. File Antivirus blocks access to the infected object and attempts to disinfect it. A backup copy of the object is moved to Backup Storage. If it is successfully disinfected, it is restored for regular use. File Antivirus does not move the object if the attempt to cure it is unsuccessful. Information about this is logged in the report under the Detected tab. To gain access, process the objects in the report.
    • Delete if disinfection fails: Enables the option to automatically delete infected objects if the recovery attempt for them failed. The box is checked by default if the Block access action is selected and the Disinfect box is checked.

About the Ivanti Mac Antivirus Legacy Virus Scan page

In addition to the protection of the file system provided by File Antivirus in real-time mode, it is extremely important to scan your computer for viruses regularly. This is required to stop the spread of malicious programs that have gone undetected by File Antivirus. For example, this would be necessary if the selected level of protection was too low.

Ivanti Mac Antivirus comprises the following integrated virus scan tasks:

• Virus Scan: Scan individual items for viruses, such as files, folders, disks, plug-and-play devices.

• Full Scan: Search for viruses on your computer with a thorough scan of all hard drives.

• Quick Scan: Scans only critical areas of the computer for viruses, including folders with operating system files and system libraries.

If you want to schedule a full or quick client scan, change the Run mode on the Full Scan page or the Quick Scan page.

This page contains the following options:

• Security Level: Specifies one of the three file security levels: Maximum protection, Recommended, or Maximum speed.

  Maximum protection: Security level that provides the most complete scan of the files you open, save, or start.

  Recommended: Default security level that provides for scan of the following categories of objects: programs and objects by content, only new objects and objects modified since the last scan, and  embedded OLE objects.

  Maximum speed: Security level that allows you to comfortably work with applications requiring significant resources. Range of files being scanned at this level is reduced.

• File types: Specifies whether to scan all files, scan by content, or scan by extension.
  • All files: If you click this option, Ivanti Mac Antivirus scans absolutely all files on your computer.
  • Scan programs and documents (by content):Ivanti Mac Antivirus only scans potentially infected objects, such as files that may turn out to have been infected with a virus. First of all, the internal header of the file is scanned to identify its format (txt, doc, exe, and so on.). If the scan reveals that a file of such format cannot be infected, it does not scan it for viruses and immediately makes it accessible to the user. If the file format allows a risk of infection, the file will be scanned for viruses.
  • Scan programs and document (by extension):Ivanti Mac Antivirus will only scan potentially infected files, but the file format will be determined by extension. Files without extension are always scanned irrespective of the file type you select.

  NOTE: Do not forget that someone could send a virus to your computer with the .txt extension, although in reality it could be an executable file renamed as a .txt file. If you select the Scan programs and documents (by extension) option, such files will be skipped by the scan. If you select the Scan programs and documents (by content) option, Ivanti Mac Antivirus analyzes the file header, determines that the file has the .exe format and scans it for viruses.

• Optimization:
  • Skip if scan takes longer than: Specifies in seconds the length of time to scan a file before skipping it.
  • Do not scan archives larger than: Excludes large archives from scan. By default, the value is set to 100 MB.
  • Scan only new and changed files: Enables Ivanti Mac Antivirus to scan only new files and files that have been modified since the previous scan. This mode applies both to simple and compound files.
  • iSwift technology: Enables the use of the iSwift technology, which allows Ivanti Mac Antivirus to exclude certain objects from scan using a special algorithm in order to increase the scan speed. The algorithm takes into account the release date of the antivirus databases, the date of the most recent scan of an object, and any changes to the scan settings. This technique works with objects of any format, size and type. There are limitations to iSwift: it is bound to a specific file location in the file system and only applies to objects in HFS.
• Compound files:
  • Scan archives: Enables Ivanti Mac Antivirus to scan RAR, ARJ, ZIP, CAB, LHA, JAR, and ICE archives. On a full scan, this option is enabled by default. Certain archive files (such as .ha, .uue, .tar archives) cannot be deleted automatically since Ivanti Mac Antivirus does not support their disinfection, even if you select the Disinfect and Delete if disinfection fails options. To delete such archives, click the Delete archive button in the dangerous object detection notification window. This notification is displayed on the screen after the application starts processing the objects detected during the scan. You can also delete infected archives manually.
  • Scan embedded objects: Enables Ivanti Mac Antivirus to scan objects embedded in a file, such as Excel spreadsheets, macros, email attachments, and so on.
  • Scan email format files: Enables the scan of email-format files and email databases. Ivanti Mac Antivirus examines the email-format file and scans each of its components (body, attachments) for viruses. If you clear this option, Ivanti Mac Antivirus scans the email file as a single object.
  • Scan password-protected archives: Enables the scanning of archives that are protected with a password. Click this option to display the password request window on the screen before scanning objects contained in the archive. Otherwise, Ivanti Mac Antivirus will skip password-protected archives when scanning.
• Heuristic analyzer: Defines the depth of heuristic analysis. Scan level ensures the balance between the thoroughness of searches for new threats, the load on the operating system's resources, and the scan time length. To set a scan level, move the slider along the scale.
• Action: Specifies the action that Ivanti Mac Antivirus performs if infected files are detected when scanning. Before attempting to disinfect or delete an infected file, Ivanti Mac Antivirus creates a backup copy for subsequent restoration or disinfection.
  • Prompt for action when the scan is complete: After the scan is complete, Ivanti Mac Antivirus displays a warning message with the information about which malicious code has infected or potentially infected the file, and offers you the selection of further actions. These actions may vary depending on the object's status.
  • Prompt for action during scan: During the scan, File Antivirus displays a warning message with the information about which malicious code has infected (potentially infected) the file, and offers you the selection of further actions. These actions may vary depending on the object's status.
  • Do not prompt for action:
    • Disinfect: Ivanti Mac Antivirus automatically attempts to disinfect all infected files that are detected. Ivanti Mac Antivirus blocks access to the infected object and attempts to disinfect it. A backup copy of the object is moved to Backup Storage. If it is successfully disinfected, it is restored for regular use. It does not move the object if the attempt to cure it is unsuccessful. Information about this is logged in the report under the Detected tab. To gain access, process the objects in the report.
    • Delete if disinfection fails: Ivanti Mac Antivirus automatically delete infected objects if the recovery attempt for them failed.

About the Ivanti Mac Antivirus Legacy Virus Scan: Full Scan page

In addition to the protection of the file system provided by File Antivirus in real-time mode, it is extremely important to scan your computer for viruses regularly. This is required to stop the spread of malicious programs that have gone undetected by File Antivirus. For example, this would be necessary if the selected level of protection was too low.

Ivanti Mac Antivirus comprises the following integrated virus scan tasks:

• Virus Scan: Scan individual items for viruses, such as files, folders, disks, plug-and-play devices.

• Full Scan: Search for viruses on your computer with a thorough scan of all hard drives.

• Quick Scan: Scans only critical areas of the computer for viruses, including folders with operating system files and system libraries.

Use this page to configure the way Ivanti Mac Antivirus performs full scans on target devices. If you want to schedule a quick client scan, change the Run mode on the Quick Scan page.

This page contains the following options:

• Security Level: Specifies one of the three file security levels: Maximum protection, Recommended, or Maximum speed.

  Maximum protection: Security level that provides the most complete scan of the files you open, save, or start.

  Recommended: Default security level that provides for scan of the following categories of objects: programs and objects by content, only new objects and objects modified since the last scan, and  embedded OLE objects.

  Maximum speed: Security level that allows you to comfortably work with applications requiring significant resources. Range of files being scanned at this level is reduced.

• File types: Specifies whether to scan all files, scan by content, or scan by extension.
  • All files: If you click this option, Ivanti Mac Antivirus scans absolutely all files on your computer.
  • Scan programs and documents (by content):Ivanti Mac Antivirus only scans potentially infected objects, such as files that may turn out to have been infected with a virus. First of all, the internal header of the file is scanned to identify its format (txt, doc, exe, and so on.). If the scan reveals that a file of such format cannot be infected, it does not scan it for viruses and immediately makes it accessible to the user. If the file format allows a risk of infection, the file will be scanned for viruses.
  • Scan programs and document (by extension):Ivanti Mac Antivirus will only scan potentially infected files, but the file format will be determined by extension. Files without extension are always scanned irrespective of the file type you select.

  NOTE: Do not forget that someone could send a virus to your computer with the .txt extension, although in reality it could be an executable file renamed as a .txt file. If you select the Scan programs and documents (by extension) option, such files will be skipped by the scan. If you select the Scan programs and documents (by content) option, Ivanti Mac Antivirus analyzes the file header, determines that the file has the .exe format and scans it for viruses.

• Optimization:
  • Skip if scan takes longer than: Specifies in seconds the length of time to scan a file before skipping it.
  • Do not scan archives larger than: Excludes large archives from scan. By default, the value is set to 100 MB.
  • Scan only new and changed files: Enables Ivanti Mac Antivirus to scan only new files and files that have been modified since the previous scan. This mode applies both to simple and compound files.
  • iSwift technology: Enables the use of the iSwift technology, which allows File Antivirus to exclude certain objects from scan using a special algorithm in order to increase the scan speed. The algorithm takes into account the release date of the antivirus databases, the date of the most recent scan of an object, and any changes to the scan settings. This technique works with objects of any format, size and type. There are limitations to iSwift: it is bound to a specific file location in the file system and only applies to objects in HFS.
• Compound files:
  • Scan archives: Enables Ivanti Mac Antivirus to scan RAR, ARJ, ZIP, CAB, LHA, JAR, and ICE archives. On a full scan, this option is enabled by default. Certain archive files (such as .ha, .uue, .tar archives) cannot be deleted automatically since Ivanti Mac Antivirus does not support their disinfection, even if you select the Disinfect and Delete if disinfection fails options. To delete such archives, click the Delete archive button in the dangerous object detection notification window. This notification is displayed on the screen after the application starts processing the objects detected during the scan. You can also delete infected archives manually.
  • Scan embedded objects: Enables Ivanti Mac Antivirus to scan objects embedded in a file, such as Excel spreadsheets, macros, email attachments, and so on.
  • Scan email format files: Enables the scan of email-format files and email databases. Ivanti Mac Antivirus examines the email-format file and scans each of its components (body, attachments) for viruses. If you clear this option, Ivanti Mac Antivirus scans the email file as a single object.
  • Scan password-protected archives: Enables the scanning of archives that are protected with a password. Click this option to display the password request window on the screen before scanning objects contained in the archive. Otherwise, Ivanti Mac Antivirus will skip password-protected archives when scanning.
• Heuristic analyzer: Defines the depth of heuristic analysis. Scan level ensures the balance between the thoroughness of searches for new threats, the load on the operating system's resources, and the scan time length. To set a scan level, move the slider along the scale.
• Action: Specifies the action that Ivanti Mac Antivirus performs if infected files are detected when scanning. Before attempting to disinfect or delete an infected file, Ivanti Mac Antivirus creates a backup copy for subsequent restoration or disinfection.
  • Prompt for action when the scan is complete: After the scan is complete, Ivanti Mac Antivirus displays a warning message with the information about which malicious code has infected (potentially infected) the file, and offers you the selection of further actions. These actions may vary depending on the object's status.
  • Prompt for action during scan: During the scan, Ivanti Mac Antivirus displays a warning message with the information about which malicious code has infected (potentially infected) the file, and offers you the selection of further actions. These actions may vary depending on the object's status.
  • Do not prompt for action:
    • Disinfect: Ivanti Mac Antivirus automatically attempts to disinfect all infected files that are detected. Ivanti Mac Antivirus blocks access to the infected object and attempts to disinfect it. A backup copy of the object is moved to Backup Storage. If it is successfully disinfected, it is restored for regular use. It does not move the object if the attempt to cure it is unsuccessful. Information about this is logged in the report under the Detected tab. To gain access, process the objects in the report.
    • Delete if disinfection fails: Ivanti Mac Antivirus automatically delete infected objects if the recovery attempt for them failed.

• Run mode: By default, Ivanti Mac Antivirus scans once a day. To change the schedule, click Edit... to open the Run mode dialog box. In the Frequency list, select how often Ivanti Mac Antivirus will scan, then specify the additional details that apply to the selected frequency.

About the Ivanti Mac Antivirus Legacy Virus Scan: Quick Scan page

In addition to the protection of the file system provided by File Antivirus in real-time mode, it is extremely important to scan your computer for viruses regularly. This is required to stop the spread of malicious programs that have gone undetected by File Antivirus. For example, this would be necessary if the selected level of protection was too low.

Ivanti Mac Antivirus comprises the following integrated virus scan tasks:

• Virus Scan: Scan individual items for viruses, such as files, folders, disks, plug-and-play devices.

• Full Scan: Search for viruses on your computer with a thorough scan of all hard drives.

• Quick Scan: Scans only critical areas of the computer for viruses, including folders with operating system files and system libraries.

Use this page to configure the way Ivanti Mac Antivirus performs critical areas scans on target devices. If you want to schedule a full client scan, change the Run mode on the Full Scan page.

This page contains the following options:

• Security Level: Specifies one of the three file security levels: Maximum protection, Recommended, or Maximum speed.

  Maximum protection: Security level that provides the most complete scan of the files you open, save, or start.

  Recommended: Default security level that provides for scan of the following categories of objects: programs and objects by content, only new objects and objects modified since the last scan, and  embedded OLE objects.

  Maximum speed: Security level that allows you to comfortably work with applications requiring significant resources. Range of files being scanned at this level is reduced.

• File types: Specifies whether to scan all files, scan by content, or scan by extension.
  • All files: If you click this option, Ivanti Mac Antivirus scans absolutely all files on your computer.
  • Scan programs and documents (by content):Ivanti Mac Antivirus only scans potentially infected objects, such as files that may turn out to have been infected with a virus. First of all, the internal header of the file is scanned to identify its format (txt, doc, exe, and so on.). If the scan reveals that a file of such format cannot be infected, it does not scan it for viruses and immediately makes it accessible to the user. If the file format allows a risk of infection, the file will be scanned for viruses.
  • Scan programs and document (by extension):Ivanti Mac Antivirus will only scan potentially infected files, but the file format will be determined by extension. Files without extension are always scanned irrespective of the file type you select.

  NOTE: Do not forget that someone could send a virus to your computer with the .txt extension, although in reality it could be an executable file renamed as a .txt file. If you select the Scan programs and documents (by extension) option, such files will be skipped by the scan. If you select the Scan programs and documents (by content) option, Ivanti Mac Antivirus analyzes the file header, determines that the file has the .exe format and scans it for viruses.

• Optimization:
  • Skip if scan takes longer than: Specifies in seconds the length of time to scan a file before skipping it.
  • Do not scan archives larger than: Excludes large archives from scan. By default, the value is set to 100 MB.
  • Scan only new and changed files: Enables Ivanti Mac Antivirus to scan only new files and files that have been modified since the previous scan. This mode applies both to simple and compound files.
  • iSwift technology: Enables the use of the iSwift technology, which allows File Antivirus to exclude certain objects from scan using a special algorithm in order to increase the scan speed. The algorithm takes into account the release date of the antivirus databases, the date of the most recent scan of an object, and any changes to the scan settings. This technique works with objects of any format, size and type. There are limitations to iSwift: it is bound to a specific file location in the file system and only applies to objects in HFS.
• Compound files:
  • Scan archives: Enables Ivanti Mac Antivirus to scan RAR, ARJ, ZIP, CAB, LHA, JAR, and ICE archives. On a full scan, this option is enabled by default. Certain archive files (such as .ha, .uue, .tar archives) cannot be deleted automatically since Ivanti Mac Antivirus does not support their disinfection, even if you select the Disinfect and Delete if disinfection fails options. To delete such archives, click the Delete archive button in the dangerous object detection notification window. This notification is displayed on the screen after the application starts processing the objects detected during the scan. You can also delete infected archives manually.
  • Scan embedded objects: Enables Ivanti Mac Antivirus to scan objects embedded in a file, such as Excel spreadsheets, macros, email attachments, and so on.
  • Scan email format files: Enables the scan of email-format files and email databases. Ivanti Mac Antivirus examines the email-format file and scans each of its components (body, attachments) for viruses. If you clear this option, Ivanti Mac Antivirus scans the email file as a single object.
  • Scan password-protected archives: Enables the scanning of archives that are protected with a password. Click this option to display the password request window on the screen before scanning objects contained in the archive. Otherwise, Ivanti Mac Antivirus will skip password-protected archives when scanning.
• Heuristic analyzer: Defines the depth of heuristic analysis. Scan level ensures the balance between the thoroughness of searches for new threats, the load on the operating system's resources, and the scan time length. To set a scan level, move the slider along the scale.
• Action: Specifies the action that Ivanti Mac Antivirus performs if infected files are detected when scanning. Before attempting to disinfect or delete an infected file, Ivanti Mac Antivirus creates a backup copy for subsequent restoration or disinfection.
  • Prompt for action when the scan is complete: After the scan is complete, Ivanti Mac Antivirus displays a warning message with the information about which malicious code has infected (potentially infected) the file, and offers you the selection of further actions. These actions may vary depending on the object's status.
  • Prompt for action during scan: During the scan, Ivanti Mac Antivirus displays a warning message with the information about which malicious code has infected (potentially infected) the file, and offers you the selection of further actions. These actions may vary depending on the object's status.
  • Do not prompt for action:
    • Disinfect: Ivanti Mac Antivirus automatically attempts to disinfect all infected files that are detected. Ivanti Mac Antivirus blocks access to the infected object and attempts to disinfect it. A backup copy of the object is moved to Backup Storage. If it is successfully disinfected, it is restored for regular use. It does not move the object if the attempt to cure it is unsuccessful. Information about this is logged in the report under the Detected tab. To gain access, process the objects in the report.
    • Delete if disinfection fails: Ivanti Mac Antivirus automatically delete infected objects if the recovery attempt for them failed.

• Run mode: By default, Ivanti Mac Antivirus scans once a day. To change the schedule, click Edit... to open the Run mode dialog box. In the Frequency list, select how often Ivanti Mac Antivirus will scan. In the Schedule section, specify the additional details that apply to the selected frequency.

About the Ivanti Mac Antivirus Legacy Threats page

Use this page to configure the way Ivanti Mac Antivirus handles various types of malware.

This page contains the following options:

• Malware categories: Allows you to create a list of threats to detect by enabling control of the most dangerous types of malware.
  • Virus, worms, Trojans, hack tools: This group includes the most common and dangerous categories of malware. Ivanti Mac Antivirus always controls malware from this group. This option is selected by default and cannot be cleared.
  • Spyware and adware: Enables control of riskware. This option is selected by default.
  • Auto-dialers: Enables control of programs that establish phone connections over a modem in hidden mode. This option is selected by default.
  • Other programs: Enables control of programs that are not malicious or dangerous but under certain circumstances may be used to do harm to your computer.

• Trusted zone: Specifies the objects that Ivanti Mac Antivirus will exclude from the scan. Click Add... to specify the object, threat type, and component for each trusted item.
  • Object: Specify all objects or enter the path to a trusted object. The name of a file, folder, or a file mask can be specified as an object.
  • Threat type: Specify all threats or enter a threat name. The box next to each element of the list enables or clears the use of this exclusion rule. All boxes are checked by default. The list of trusted zone objects is blank by default.
  • Component: Specify whether to exclude the trusted item from File Antivirus, Virus scan, or both.

About the Ivanti Mac Antivirus Legacy: Scheduled Tasks page

Use this page to schedule client pattern file updates for Mac computers. Macs use the OS X 'launchd' service to download and install these updates, from either the core or Kaspersky's site. If you want to schedule a full or quick client scan, change the Run mode on the Full Scan page or the Quick Scan page.

This page contains the following options:

• Scheduled tasks:
  • Update: Specifies when to update virus definitions. Click Change schedule... to open the Schedule periodic virus definition updates window, where you can select the frequency and time of an update.

About the Ivanti Mac Antivirus Legacy Scheduled Tasks: Update page

Use this page to configure virus definition (pattern) file updates scheduling, user download options, and access options for target devices with these antivirus settings. To schedule an update, click Update on the Scheduled Tasks page.

This page contains the following options:

• Download "pilot" version of virus definition files: Click this option to download virus definition files from the pilot folder instead of from the default location on the core server. Virus definitions in the pilot folder can be downloaded by a restricted set of users for the purpose of testing the virus definitions before deploying them to the entire network. When you create an antivirus scan task, you can also choose to download the latest virus definitions updates, including those residing in the pilot test folder, then associate an antivirus settings with this option enabled to ensure that the test devices receive the latest known virus definition files. If this option is selected, virus definition files in the default folder are not downloaded.
• Download virus definition updates from: Specifies the source site (core server or Kaspersky content server) from which virus definition files are downloaded.
•  Preferred server/Peer download options: Allows you to configure core server settings if you've selected one of the download source site options that includes the core.
  • Attempt preferred server: Prevents virus definition file downloads via a preferred server. For more information about preferred servers, see About software distribution.
• Bandwidth used from core or preferred server (WAN): Specifies the bandwidth used. You can move the slider or enter a value in the percentage box.
• Update application modules: Enables downloads of application module updates along with antivirus database updates. If selected, Ivanti Mac Antivirus includes application module updates in the update package when the application runs the update task. This option is selected by default.
• Rescan Quarantine after update: Enables the scan of the content of Quarantine after each update. Quarantine stores objects whose contents include malware that was not properly identified by File Antivirus or during a virus scan task. After the databases are updated, Ivanti Mac Antivirus will most likely be able to clearly identify and eliminate the threat.

About the Ivanti Mac Antivirus Legacy Reports page

Use this page to configure Ivanti Mac Antivirus Reports settings on target devices.

This page contains the following options:

• Reports:
  • Log non-critical events: Enables the logging of information-type events. As a rule, these events are not important for security.
  • Keep only recent events: Enables the logging of important events only, which have occurred at the last run of the task. If the box is checked, the information will be updated every time the task is restarted. At that, important information (such as entries of detected malicious objects) will be saved, while non-critical information will be deleted.
  • Delete reports after: Specifies the maximum report storage term in number of days. The default maximum storage term for reports is 30 days. After that period of time, Ivanti Mac Antivirus automatically deletes the oldest entries from the report file.
• Quarantine and Backup storage: Allows you to configure quarantine and backup settings. The data storage comprises a quarantine catalog and storage for backup copies of files.
  • Delete objects after: Specifies the maximum storage term for files in quarantine and copies of files in backup. The maximum file storage term is measured in days. The default maximum storage term for files is 30 days. After expiration of the maximum storage term, Ivanti Mac Antivirus deletes the oldest files from Quarantine and Backup.

About the Ivanti Mac Antivirus Legacy Service page

Use this page to configure the Service settings that Ivanti Mac Antivirus will use on target devices.

This page contains the following options:

• Autorun: Specifies whether Ivanti Mac Antivirus will run during computer startup. This option is checked by default.
• Battery: Specifies whether to disable scheduled scans while running on battery power. This option is checked by default.

About the Ivanti Mac Antivirus Legacy Appearance page

Use this page to configure the Appearance settings that Ivanti Mac Antivirus will use on target devices.

This page contains the following options:

• In Menu Bar: Displays the Ivanti Mac Antivirus icon in the menu bar. This option is selected by default.
• In Dock; Displays the Ivanti Mac Antivirus icon in the Dock. Any changes you make to the location of the icon will appear after you restart the application.
• Nowhere: Click this option if you do not want the Ivanti Mac Antivirus icon to appear.

About the Ivanti Mac Antivirus Legacy Import Kaspersky settings page

Use this page to configure how Ivanti Mac Antivirus will import Kaspersky settings on target devices.

This page contains the following options:

• Import settings file from a Kaspersky antivirus client: Lets you import settings from a client device. To import the settings, specify Kaspersky settings on a client and save the settings as a configuration file. From the console, browse to the configuration file. The options listed in the file will be set first and then any Ivanti Antivirus settings will be set.
  

  NOTE: Ivanti Antivirus won't look for a new configuration file and automatically update it. You must manually update the configuration file if you want to import different settings.

• Current configuration imported from: The Browse button [...] opens the Select a previously saved Kaspersky configuration file window. Browse to the \ldlogon folder, click the configuration file, then click Open.
• Clear password after import: Enables users to change Kaspersky settings without the settings file password.
• On date: The date of the import.
• Notes: Any notes about the configuration file.