Use Learn Mode To Discover Programs; Types Of Scans; On-Access (Automatic) Scans - McAfee TSA00M005PAA - Total Protection Service Product Manual

Using Virus and Spyware Protection

Types of scans

How policy options are implemented in the three protection modes
Mode
Report
Prompt
Protect

Use learn mode to discover programs

Report mode can be used as a "learn mode" to help you determine which programs to
approve. In Report mode, spyware protection tracks but does not block potentially unwanted
programs. You can review detected programs in the Unrecognized Programs report and
approve those that are appropriate for your policy. When you no longer see unapproved
programs you want to approve in the report, change the policy setting for spyware protection
mode to Prompt or Protect.
Types of scans
Virus and spyware protection scans files automatically for viruses and spyware. At any time, users
can perform manual scans of files, folders, or email, and administrators can set up scheduled
scans. Policy options let you configure whether optional email and spyware scans occur.
• Automatic (on-access) scans
• Manual on-demand scans
• Scheduled on-demand scans
• Email scans
• Spyware scans
The behavior of the scanning features on client computers is defined in the policies configured
in the SecurityCenter. Policy settings determine the types of files, programs, and other items
detected; whether users can manage their detections; how frequently computers check for
updates; and when scheduled scans occur.

On-access (automatic) scans

On-access scans are those that occur on client computers whenever users access files (for
example, open a file or run a program).
McAfee Total Protection Service Product Guide
Behavior of virus and spyware protection
• Users are not prompted about detections.
• Detections are reported to the SecurityCenter.
• Administrator can select approved programs, which are not reported as detections.
• Can be used as a "learn" mode to discover which programs to approve and block.
• Users are prompted about detections.
• Detections are reported to the SecurityCenter.
• Administrator can select approved programs. These programs are not reported as
detections, and users are not prompted for a response to them.
• Users can approve additional programs in response to prompts. These are reported
the SecurityCenter.
• Users are not prompted about detections.
• Users are notified about deleted or quarantined programs.
• Detections are reported to the SecurityCenter.
• Administrator can select approved programs, which are not reported as detections.
to
65