This section describes the best practices to define the preferences for scheduling an on-access scan and an on-demand scan.
On-access scan preferences
Always enable On-access-Scan because it checks every file the user accesses, and detects malware before it runs.
Enable the scan option for the Network Volumes when needed, to scan files copied from or written to any network volumes.
On-demand scan preferences
Always enable the scan for Archives & Compressed Files while performing on-demand scan. This is recommended if you disabled scanning option for these files.
On-demand scan schedule
On-demand scan schedule
Schedule an on-demand scan during non-peak hours (for example, during weekends or maintenance period).
When scheduling an on-demand scan for the first time, schedule a full on-demand scan of your entire hard disk.
You can add wildcards from ePO - On-prem that match required patterns to exclude multiple files and folders from being scanned.
Here are some recommended exclusions:
Microsoft Outlook database files
Encrypted files
Generic plist files such as
Info.plistorversion.plistfor on-access scanning
Here are some recommended exclusion examples using wildcards:
To exclude files with the extension mdb, use *.mdb
To exclude each user's Outlook Database files of different Microsoft Office versions, use /Users/*/Documents/Microsoft\ User\ Data/Office\ *\ Identities/*\ Identity/*
To exclude all Info.plist under /Applications, use /Applications/*/Contents/Info.plist
To exclude all version.plist under /Applications, use /Applications/*/Contents/version.plist