OfficeScan 10 Administrator's Guide - Online Help Home - Trend Micro

Keeping Protection Up-to-Date
Download the Virus Pattern and other OfficeScan pattern files from the following Web
site, where you can also find the current version, release date, and a list of all the new
virus definitions included in the file:
http://www.trendmicro.com/download/pattern.asp
Smart Scan
When in smart scan mode, OfficeScan clients use two lightweight patterns that work
together to provide the same protection provided by conventional anti-malware and
anti-spyware patterns.
A Smart Scan Server hosts the Smart Scan Pattern. This pattern is updated hourly and
contains majority of the pattern definitions. Smart scan clients do not download this
pattern. Clients verify potential threats against the pattern by sending scan queries to the
Smart Scan Server.
The client update source (OfficeScan server or customized update source) hosts the
Smart Scan Agent Pattern. This pattern is updated daily and contains all the other
pattern definitions not found on the Smart Scan Pattern. Clients download this pattern
from the update source using the same methods for downloading other OfficeScan
components.
The OfficeScan client, using the Smart Scan Agent Pattern and advanced filtering
technology, can verify whether a file is infected without sending scan queries to the
Smart Scan Server. The client only sends scan queries if it cannot determine the risk of
the file during scanning. A client that cannot verify a file’s risk locally and is unable to
connect to a Smart Scan Server after several attempts:
• Flags the file for verification
• Temporarily allows access to the file
When connection to a Smart Scan Server is restored, all the files that have been flagged
are re-scanned. The appropriate scan action is then performed on files that have been
confirmed as infected.
4-3