Reference Guide

Manage Policies
220
Scan Processes on
Enable
Not Selected
Selected
Not Selected
Rescans all processes that are currently in memory each time:
- On-Access Scan is disabled and re-enabled.
- The computer starts.
When the on-access scanner is enabled, it always scans all processes when
they are executed.
Because some programs or executables start automatically when the
computer starts, enabling this option can slow the computer and increase
computer startup time.
Scan Trusted
Installers
Not Selected
Selected
Not Selected
Scans MSI files or Windows Trusted Installer service files. Disable this option
to
improve the performance of large Microsoft application installers.
Scan When Copying
Between Local
Folders
Not Selected
Selected
Not Selected
Scans files whenever the user copies from one local folder to another. If
disabled, only items in the destination folder are scanned. If enabled, items in
both source and destination folders are scanned.
Reputation Service
Sensitivity
Medium
Disable
Very Low
Low
Medium
High
Very High
When enabled, samples are submitted to the lab to determine if they are
malware. Sensitivity level configures the sensitivity level to use when
determining if a detected sample is malware.
The higher the sensitivity level, the higher the number of malware detections.
However, allowing more detections might result in more false positive results.
Risk levels:
Very low - The detections and risk of false positives are the same as with
regular content files. A detection is made available to Threat Protection when
the lab publishes it instead of waiting for the next file update. Use this setting
for desktops and servers with restricted user rights and a strong security
footprint. This setting results in an average of 10–15 queries per day, per
computer.
Low - This setting is the minimum recommendation for laptops or desktops
and servers with a strong security footprint. This setting results in an average
of 10–15 queries per day, per computer.
Medium - Use this level when the regular risk of exposure to malware is
greater than the risk of a false positive. The proprietary, heuristic checks result
in detections that are likely to be malware. However, some detections might
result in a false positive. With this setting, the lab checks that popular
applications and operating system files do not result in a false positive. This
setting is the minimum recommendation for laptops or desktops and servers.
This setting results in an average of 20–25 queries per day, per computer.
High - Use this setting for deployment to systems or areas which are regularly
infected. This setting results in an average of 20–25 queries per day, per
computer.
Very high - Dell recommends using this level only for scanning volumes and
directories that do not support executing programs or operating systems.
Detections found with this level are presumed malicious, but have not been
fully tested to determine if they are false positives. Use this setting for on-
demand scans on non-operating system volumes. This setting results in an
average of 20–25 queries per day, per computer.