2.7 Antimalware Agent Schedules

The Antimalware Agent Schedules enable you to schedule when a device's Antimalware Agent performs scans and updates. You can also determine when the Antimalware Agent is installed on the device after the Antimalware Enforcement Policy is assigned to it.

The schedules apply to all devices in the zone. Overrides to these schedules can be implemented at the device folder and device levels.

NOTE:When you modify the Antimalware Agent Schedules, there is a 2 hour delay for the built-in server refresh and an additional few minutes for the ZENworks Database and the Antimalware Database to sync. This needs to be taken into consideration when viewing the Next Scan status and Next Scheduled Scan status in the Antimalware page and Device Malware Status dashlet, respectively.

To access the schedules in the ZENworks Control Center, navigate to Configuration > Security > Antimalware Agent Schedules. For information about configurable options for each schedule, click the applicable option link in the table below:

Schedule Type	Description	Configurable Options
Full Scan	Protects scan targets by checking for all types of malware threatening their security.	Days of the Week Monthly Fixed Interval Wake-on-LAN
Quick Scan	A reduced-scope on-demand scan that typically runs in less than a minute and uses a fraction of the resources needed to run a full scan.	Days of the Week Monthly Fixed Interval Wake-on-LAN
Malware Signature Update	Checks for and downloads the newest malware signature files which may be used to disinfect infected files.	Days of the Week Fixed Interval Wake-on-LAN
Antimalware Agent Update	Checks for and installs updates to the Antimalware Agent.	Days of the Week Fixed Interval Postpone reboot Force reboot after update... Wake-on-LAN
Antimalware Agent Installation Schedule	Defines when managed devices install the Antimalware Agent.	At policy enforcement Days of the Week Monthly Wake-on-LAN

2.7.1 Configurable Options in Agent Schedules

Reference the sections below for information about the configurable options available in the Antimalware Agent Schedules.

Days of the Week

This schedule lets you specify the days during the week that you want the scan to run or to install updates. The action is run on these same days each week.

Select Days of the Week, then fill in the following fields:

Sun ... Sat: Specifies the days of the week you want to execute the action.
Start Time: Specifies the time you want to run the scan.
Process immediately if device unable to execute on schedule: The action is considered past due if it is not executed on the configured schedule for some reason.
Use Coordinated Universal Time: The Start Time is converted to Universal Coordinated Time (UTC). Select this option to indicate that the Start Time you entered is already in Coordinated Universal Time and should not be converted. For example, suppose you are in the Eastern time zone. If you enter 10:00 a.m. and select this option, the Start Time is scheduled for 10:00 UTC. If you don’t select this option, the Start Time is scheduled for 14:00 UTC because Eastern time is UTC - 4 hours.
Start at a Random Time between Start Time and End Time: Starts the action at a randomly selected time between the time you specify in the Start Time and End Time fields. You can use this option to avoid possible network overload from concurrently scheduled scans or updates.
Restrict Schedule Execution to the Following Date Range: Limits executing the action to the time period specified by the starting and ending dates.

Monthly

This schedule lets you specify one or more days during the month to run the scan or install updates.

Select Monthly, then fill in the following fields:

Day of the Month: Specifies the day of the month to execute the action. Valid entries are 1 through 31. If you specify 29, 30, or 31 and a month does not have those days, the action is not executed that month.
Last Day of the Month: Executes the action on the last day of the month, regardless of its date (28, 30, or 31).
First Sunday: Specifies a specific day of a week. For example, the first Monday or the third Tuesday. Click to add multiple days.
Start Time: Specifies the time you want to execute the action.
Process Immediately if Device Unable to Execute on Schedule: Any action is considered past due if it is not executed on the configured schedule for some reason.
Use Coordinated Universal Time: The Start Time is converted to Universal Coordinated Time (UTC). Select this option to indicate that the Start Time you entered is already in Coordinated Universal Time and should not be converted. For example, suppose you are in the Eastern time zone. If you enter 10:00 a.m. and select this option, the Start Time is scheduled for 10:00 UTC. If you don’t select this option, the Start Time is scheduled for 14:00 UTC because Eastern time is UTC - 4 hours.
Start at a Random Time between Start Time and End Time: Executes the action at a randomly selected time between the time you specify in the Start Time and End Time boxes. You can use this option to avoid possible network overload from concurrently scheduled events.
Restrict Schedule Execution to the Following Date Range: Limits executing the action to the time period specified by the starting and ending dates.

Fixed Interval

This schedule lets you specify an interval between days to run the scan or install updates. For example, you can execute the action every 14 days.

Select Fixed Interval, then fill in the following fields:

Months, Weeks, Days, Hours, Minutes: Specifies the interval between times when the action is executed. You can use any combination of months, weeks, days, hours, and minutes. For example, both 7 days, 8 hours and 1 week, 8 hours provide the same schedule.
Start Date: Specifies the initial start date for the interval.
Start Time: Specifies the initial start time for the interval.
Process Immediately if Device Unable to Execute on Schedule: A action is considered past due if it is not executed on the configured schedule for some reason. If you select this option:
Use Coordinated Universal Time: The Start Time is converted to Universal Coordinated Time (UTC). Select this option to indicate that the Start Time you entered is already in Coordinated Universal Time and should not be converted. For example, suppose you are in the Eastern time zone. If you enter 10:00 a.m. and select this option, the Start Time is scheduled for 10:00 UTC. If you don’t select this option, the Start Time is scheduled for 14:00 UTC because Eastern time is UTC - 4 hours.
Restrict Schedule Execution to the Following Date Range: Limits executing the action to the time period specified by the start date, end date, and end time.

Wake-on-LAN

If the device is not on at the scheduled time, this option attempts to use Wake-on-LAN technology to power on the device. The device must support Wake-on-LAN.

For information about Wake-on-LAN options or how it works, see Wake-on-LAN in ZENworks Control Center in the ZENworks Using Wake-on-LAN reference.

Reboot Options for Antimalware Agent Updates

The two configurable options for scheduling device reboots after an Antimalware Agent update runs, are defined below:

Postpone reboot: If the device requires a reboot after an Antimalware Agent update runs, this option will postpone the reboot from occurring automatically. Use the Force reboot... option in conjunction with this setting to schedule when the postponement expires.
Force reboot (if needed) after update every:Use this option in conjunction with the Postpone reboot setting to schedule when the postponement expires. You can set a daily time or a specific day of the week.

At Policy Enforcement

The At policy enforcement option is the default setting for installation of the Antimalware Agent on managed devices when the Antimalware Enforcement Policy is assigned to those devices. You can change this setting to run at a specific day and time of the week in the Antimalware Agent Installation Window schedule.