On-Access Scanning

On-Access Scanning refers to the process of scanning files as they are accessed by users of the system. Powertech Antivirus includes a service, avsvc, that allows you to do this.

On-Access Scanning can be started and stopped for Endpoints, both individually and in groups, using Powertech Antivirus Server. To manage On-Access Scanning from the command line, see the avsvcctl command.

WARNING: Prior to scanning, ensure you have acquired the latest virus definitions from Trellix (see Updating Virus Definitions). If you attempt to scan without updating to the latest virus definitions, Powertech Antivirus will perform the scan, but without the code required to identify the latest threats.

On-Access Scanning with Powertech Antivirus Server

To use Powertech Antivirus Server for On-Access Scanning, first install Powertech Antivirus Server, and connect the Endpoints you intend to scan. See the Powertech Antivirus Installation Guide for details on installing and connecting Powertech Antivirus Server and adding Endpoints.

To run On-Access scans using Powertech Antivirus Server

  1. Open Fortra Application Hub and choose Powertech Antivirus. From the Navigation pane, choose Configurations. Review the On-Access Configurations to confirm one exists that you want to use for your scan. See Configurations page. To add a new On-Access Configuration, choose Add > On-Access Configuration and define one to meet your requirements. (See New On-Access Configuration pane).
  2. On the Powertech Antivirus Navigation pane, choose Endpoints.
  3. Ensure the virus definition DAT files are up-to-date on the Endpoints you want to scan. See Updating Virus Definitions.
  4. Use the check box to the left of the Endpoint listing to specify the Endpoints you want to scan. Additional buttons appear on the top of the page with a yellow background.
  5. Click Start. A message appears indicating On-Access scanning is starting.
  6. Click Activity Status to open the Activity Status page, where you can monitor the status of submitted On-Access Scanning requests.
  7. If the Start action failed on one or more Endpoints, you can rerun the request on failed Endpoints only by clicking Three vertical dots (Show Actions) > Rerun On-Access Service Config on Failed Endpoints.