The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages expected in November 2026. We hope you enjoy the updated experience.

Actions

Prev Next

Specify how the scanner responds when it detects a threat.

For Linux systems, when the action is set to Deny access to files, on detection, the actual file write operation doesn’t stop. However, subsequent access is denied. In addition, if all actions fail, the fallback action is Deny access to files.

Option definitions
Section Option Definition Scan type
On-Access Scan On-Demand Scan
Threat detection first response Specifies the first action for the scanner to take when a threat is detected.
Allow access to files Allows users to access files with potential threats.
Deny access to files Prevents users from accessing any files with potential threats.
Continue scanning Continues scanning files when a threat is detected. The scanner doesn't move items to the quarantine.
Clean files Removes the threat from the detected file, if possible.
Delete files Deletes files with potential threats.
If first response fails Specifies the action for the scanner to take when a threat is detected if the first action fails.
Allow access to files Allows users to access files with potential threats.
Deny access to files Prevents users from accessing files with potential threats.
Continue scanning Continues scanning files when a threat is detected. The scanner doesn't move items to the quarantine.
Delete files Deletes files with potential threats.
Unwanted program first response Specifies the first action for the scanner to take when a potentially unwanted program is detected.

This option is available only if Detect unwanted programs is selected.

Deny access to files Prevents users from accessing files with potential threats.
Allow access to files Allows users to access files with potential threats.
Continue scanning Continues scanning files when a threat is detected. The scanner doesn't move items to the quarantine.
Clean files Removes the threat from the potentially unwanted program file, if possible.
Delete files Deletes potentially unwanted program files.
If first response fails Specifies the action for the scanner to take when an unwanted program detection is detected if the first action fails.

This option is available only if Detect unwanted programs is selected.

Deny access to files Prevents users from accessing files with potential threats.
Allow access to files Allows users to access files with potential threats.
Continue scanning Continues scanning files when a threat is detected. The scanner doesn't move items to the quarantine.
Delete files Deletes potentially unwanted program files automatically.
When the scan times out (Linux only) Specifies the action for the scanner to take when the scan times out.
Deny access to files Prevents users from accessing files with potential threats.
Allow access to files Allows users to access files with potential threats.
When a scan error occurs (Linux only) Specifies the action for the scanner to take when a scan error occurs.
Deny access to files Prevents users from accessing files with potential threats.
Allow access to files Allows users to access files with potential threats.