Chapter 10 - Performing background and on-access scans
Applies to: Microsoft Antigen
Microsoft® Exchange Server VSAPI 2 and 2.5 provide the ability to perform background scanning of all files in the information store and on-access scanning of files as they are accessed. These features enhance the functionality of Antigen by ensuring that files are scanned by using the latest engine updates and scanning configuration.
On-access scanning
On-access scanning ensures that all files being accessed will be scanned if the configuration of the antivirus software has changed since the file was originally stored.
Configuring on-access scanning
On-access scanning is controlled by the following General Option settings:
| Setting | Description |
|---|---|
Scan on Scan Job Update |
Causes previously scanned files to be rescanned when accessed following a scan job update. |
Scan on Scanner Update |
Causes previously scanned files to be rescanned when accessed following a scanner update. |
Note
When these options are enabled, the Mailbox server may experience increased virus scanning, which can impact system performance.
Background scanning
Background scanning is intended to ensure that all files are scanned using the latest updates and configurations. Background Scanning can initiate a scan of the entire information store when any change is made to the Realtime Scan Job and saved, when the Exchange Services are recycled, or when a new Storage Group is mounted. A Background Scan can also be initiated after scan engine updates if desired.
Background Scanning is disabled by default since Background Scanning of large information stores can place a heavy load on the server. The Background Scan Job uses the same configuration settings as the Realtime Scan Job for respective Storage Groups.
To enable background scanning
Open the General Options work pane and select one or both of the following options:
Enable Background Scan if ’Scan On Scan Job Update’ Enabled: When this setting is enabled, Antigen will initiate a Background Scan every time a scan job setting is updated.
Enable Background Scan if ’Scan On Scanner Update’ Enabled: When this setting is enabled, Antigen will initiate a Background Scan every time a scanner setting is updated.
Enable the Realtime Scan Job for the Storage Groups that you want to have scanned by the Background Scanner. For more information, see Chapter 7 - Configuring Realtime Scan Jobs.
Enable the On-Access Scanning General Options Scan on Scan Job Update and Scan on Scanner Update.
To schedule a Background Scan Job
Click OPERATE in the left navigation shuttle, and then click the Schedule Job icon. The Schedule Job work pane appears on the right.
Select the VSAPI Background Scan Job at the top of the Schedule Job work pane.
Use the calendar in the Date section to set the date when the Background Scan Job will activate. The red circle indicates today's date. The date you set is highlighted in blue.
Set the run time using the Time edit field to the right of the calendar.
Indicate the Frequency of the scheduled job: run it Daily, Weekly, Monthly, or only Once (the default).
If the job is disabled, click Enable to enable it.
Click Save.
Reporting incidents
Incidents detected by background scanning and on-access scanning are reported in the Realtime column in the Incidents work pane of the REPORT shuttle.