Enable real-time antivirus protection (file, email)
Real-time antivirus protection provides ongoing background scans of specified files, file types, email messages, and email attachments, based on known virus definitions. You can also enable real-time notification to inform end users about infected files.
Real-time file protection, email scanning, and notification are all configured with antivirus settings.
NOTE: Ivanti Antivirus system tray icon indicator
When real-time antivirus protection is enabled, the Ivanti Antivirus system tray icon (on the end user device) is yellow. When real-time protection is disabled, the icon is gray.
Real-time file protection
Configure real-time file protection with the options on the Real-time protection page of the Antivirus settings dialog box. For more information, click Help.
When real-time protection is running, files are scanned for viruses every time the file is:
- Opened
- Closed
- Accessed
- Copied
- Saved
Real-time email scanning
Configure real-time email scanning with the Enable email scanning option on the General page of the Antivirus settings dialog box.
Real-time email protection provides on ongoing scan of incoming and outgoing messages. Antivirus scans the message body as well as attached messages' bodies and file attachments.
Antivirus real-time email protection supports:
- Microsoft Outlook
When real-time email protection is running, messages and attachments are:
- Scanned when opened or previewed
- Not scanned when selected
When an infected email is discovered on a managed device, Antivirus attempts to clean it. If it can be cleaned, a new header is placed in the message body to inform the end user. If the infected email can't be cleaned, the entire message body is deleted and replaced with a new header.
When a suspicious email message is discovered, the message body is converted to plain text and a header is added to the message.
Also, a dialog displays on the end user device that shows:
- File path
- File name
- Virus name
- A note telling the end user to contact their network administrator
Real-time (infected file) notification
End users can be notified when a file infected by a virus is detected, quarantined, deleted, skipped, or cleaned.
Configure real-time infected file notification with the option on the Real-time protection page of the Antivirus settings dialog box.
A dialog displays on the end user device that shows:
- File path
- File name
- Virus name
- Note telling the end user to contact their network administrator