| #

## About Scans

ScanMail has three types of scans: real-time scans, manual scans, and scheduled scans. To protect your Exchange environment, ScanMail scans messages and their attached files, searching for security risks and undesirable data. When ScanMail makes a detection, ScanMail automatically takes action against the detection according to your configurations.
You can configure ScanMail to scan specific targets and configure actions for ScanMail to take when it discovers a security risk or undesirable data in the targeted messages or files. You can also configure ScanMail to send notifications when it takes actions against security risks and undesirable data.
You can configure ScanMail to backup a file to the Backup folder before taking action on it. This is a safety precaution designed to protect the original file from damage.

| ##### Note Trend Micro recommends deleting backed up files once you have determined that the original file was not damaged and that it is usable after ScanMail has executed an action on it. If the file becomes damaged or unusable, send it to Trend Micro for further analysis. Even if ScanMail has completely cleaned and removed the virus itself, some viruses damage the original file code beyond repair.

By default, ScanMail scans all scannable outgoing, incoming, and stored messages in your Exchange environment. Scannable files are all files except files that are encrypted, password protected, or exceed user-configured scanning restrictions. Scanning all files provides the maximum security possible. However, scanning every message requires a lot of time and resources and might be redundant in some situations. Therefore, consider limiting the files ScanMail includes in scans.
Related information

- Real-time Scan
- Manual Scan
- Scheduled Scan
- About Manual Scans and Scheduled Scans on Cluster Servers
- Manual and Scheduled Scan Settings