The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Types of scans

Prev Next

Threat Prevention settings that apply to all on-access scans and on-demand scans include the quarantine location and potentially unwanted programs.

  • On-access scan — Configure the on-access scanner in the On-Access Scan settings. When files, folders, and programs are accessed, the on-access scanner intercepts the operation and scans the item, based on criteria defined in the settings.

  • On-demand scan

    Manual

    Run a predefined on-demand scan at any time from the Trellix Endpoint Security (ENS) Client by clicking Scan System, then selecting a scan type.

    • Quick Scan runs a quick check of the areas of the system most susceptible to infection.

    • Full Scan performs a thorough check of all areas of the system. (Recommended if you suspect the computer is infected.)

    Configure the behavior of quick and full scans in the On-Demand Scan policy settings.

    Scan an individual file or folder at any time from Windows Explorer by right-clicking the file or folder and selecting Scan for threats from the pop-up menu.

    Configure the behavior of the Right-Click Scan in the On-Demand Scan policy settings.

    Run a custom on-demand scan as administrator from the Trellix Endpoint Security (ENS) Client:

    1. Select Settings → Common → Tasks.

    2. Select the task to run.

    3. Click Run Now.

    Tip

    Use manual custom on-demand scans to associate a scan task with a reaction, such as a malware infection.

    Configure custom scans in the Custom On-Demand Scan settings from the Client Task Catalog.

    Scheduled

    When a scheduled on-demand scan is about to start, Trellix ENS displays a scan prompt at the bottom of the screen. You can start the scan immediately or defer the scan, if configured.

    Schedule the predefined on-demand scans using the Policy-Based On-Demand Scan client task settings.

    • Quick Scan — By default, the Quick Scan is enabled and scheduled to run every day at 7 p.m.

    • Full Scan — By default, the Full Scan is enabled and scheduled to run every Wednesday at 12 midnight.

      Tip

      Best practice: Use the weekly Full Scan to supplement the continuous protection of the on-access scan. The full scan includes fewer exclusions and actively checks all files for malicious code.

    Predefined on-demand scans provide details, such as scan duration, date of last full scan, and compliance status to ePO - On-prem in the Systems Information Product properties for Trellix ENS.

    Configure the behavior of quick and full scans in the On-Demand Scan policy settings.

    Schedule custom on-demand scans, using the Custom On-Demand Scan client task settings.

    Tip

    Use scheduled custom on-demand scans for targeted scans, such as daily memory scans.

    Configure custom scans in the Custom On-Demand Scan settings from the Client Task Catalog.

Threat Prevention Options includes settings that apply to all scan types.