Specifications

Protecting Computers from Security Risks
5-9
Scanning
behavior
The conventional
scan client
performs scanning
on the local
computer.
• The smart scan client performs
scanning on the local computer.
• If the client cannot determine the
risk of the file during the scan, the
client verifies the risk by sending a
scan query to a Smart Scan Server.
• Using advanced filtering
technology, the client "caches" the
scan query result. The scanning
performance improves because the
client does not need to send the
same scan query to the Smart Scan
Server.
• If a client cannot verify a file’s risk
locally and is unable to connect to
any Smart Scan Server after
several attempts:
• The client flags the file for
verification.
• The client allows temporary
access to the file.
• When connection to a Smart Scan
Server is restored, all the files that
have been flagged are re-scanned.
The appropriate scan action is then
performed on files that have been
confirmed as infected.
Components
in use and
updated
All components
available on the
update source,
except the Smart
Scan Agent Pattern
All components available on the update
source, except the Virus Pattern and
Spyware Active-monitoring Pattern
TABLE 5-27. Comparison between conventional scan and smart scan (Continued)
BASIS OF
COMPARISON
CONVENTIONAL
SCAN
SMART SCAN