On-demand scans include all the scans described below:
Full Scan: This scan is configured in the Antimalware Enforcement Policy. Full scans protect scan targets by checking for all types of malware threatening their security, such as viruses, spyware, adware, rootkits and others. The scan runs as follows:
According to the Antimalware Agent Schedule or override thereof on a device folder or device
When started from a quick task in ZENworks Control Center
When started from a zac command on the device
When started by an endpoint user from the Agent Status Console (if enabled in ZENworks Control Center)
Quick Scan: This scan is configured in the Antimalware Enforcement Policy. This is a reduced-scope on-demand scan that typically runs in less than a minute and uses a fraction of the resources needed to run a full scan. The scan runs as follows:
According to the Antimalware Agent Schedule or override thereof on a device folder or device
When started from a quick task in ZENworks Control Center
When started from a zac command on the device
When started by an endpoint user from the Agent Status Console (if enabled in ZENworks Control Center)
Custom Scan: This scan requires a Custom Scan Policy and gives you the capability to target specific threats that may not be covered in the regularly scheduled scans using the Antimalware Enforcement Policy.
According to the schedule set in the Custom Scan Policy
When started from a quick task in ZENworks Control Center
When started from a zac command on the device
Network Scan: This scan requires a Network Scan Policy and gives you the capability to scan network drives, which you cannot do with the Enforcement or Custom Scan policies.
According to the schedule set in the Network Scan Policy
When started from a quick task in ZENworks Control Center
When started from a zac command on the device
External Device Scan: When enabled, this scan automatically detects and scans removable storage devices and media when they are connected to the system, unless the Display Security Alerts option is enabled in the Antimalware Agent Notifications settings, in which case users are prompted to scan the external drive.
Contextual Scan: When the Show icon in notification area setting is enabled Antimalware Agent Notifications, endpoint users can run scans on folders in File Explorer via the right-click menu and also using the Custom Scan option in the Agent Status Console.
Scan Type |
Scheduled Scans |
Quick Task Scans |
zac Command Scans |
User Initiated Scans |
---|---|---|---|---|
Full Scan |
Yes |
Yes |
Yes |
Yes (conditional) |
Quick Scan |
Yes |
Yes |
Yes |
Yes (conditional) |
Custom Scan |
Yes |
Yes |
Yes |
No |
Network Scan |
Yes |
Yes |
Yes |
No |
External Device Scan |
No |
No |
No |
Yes (conditional) |
Contextual Scan |
No |
No |
No |
Yes (conditional) |
NOTE:You cannot initiate another scan of the same type, Full or Quick, or of the same policy for a Custom Scan or Network Scan, until that scan completes or is stopped on the device in the Agent Status Console.
For information about running scans from a quick task or zac command, see the following:
Quick task: Initiate Malware Scan
zac command: Antimalware Commands
in the ZENworks Command Line Utilities Reference.
For information about configuring scheduled scans or controlling end user scan options on devices with the Antimalware Agent installed, see the following sections: