Symantec 20032623 - Endpoint Protection Small Business Edition Implementation Manual page 141

Table 11-4
Scan type
Administrator-defined
scans
SONAR
Scan types (continued)
Description
Administrator-defined scans detect viruses and security risks by examining all files and
processes on the client computer. Administrator-defined scans can also inspect memory
and load points.
The following types of administrator-defined scans are available:
Scheduled scans
A scheduled scan runs on the client computers at designated times. Any concurrently
scheduled scans run sequentially. If a computer is turned off during a scheduled scan,
the scan does not run unless it is configured to retry missed scans. You can schedule
an active, full, or custom scan.
Note: Only custom scans are available for Mac clients.
You can save your scheduled scan settings as a template. You can use any scan that
you save as a template as the basis for a different scan. The scan templates can save
you time when you configure multiple policies. A scheduled scan template is included
by default in the policy. The default scheduled scan scans all files and directories.
Startup scans and triggered scans
Startup scans run when the users log on to the computers. Triggered scans run when
new virus definitions are downloaded to computers.
Note:
Startup scans and triggered scans are available only for Windows clients.
On-demand scans
On-demand scans are the scans that run immediately when you select the scan
command in Symantec Endpoint Protection Manager.
You can select the command from the Computers tab or from the logs.
SONAR offers real-time protection against zero-day attacks. SONAR can stop attacks
even before traditional signature-based definitions detect a threat. SONAR uses heuristics
as well as file reputation data to make decisions about applications or files.
Like proactive threat scans, SONAR detects keyloggers, spyware, and any other application
that might be malicious or potentially malicious.
Note: SONAR is only supported on Windows computers that run Symantec Endpoint
Protection Small Business Edition version 12.1 and later.
See About SONAR" on page 195.
Managing Virus and Spyware Protection
Managing scans on client computers
141