| #

## About Security Risk Scans

ScanMail protects your Exchange environment by performing scans on all incoming and outgoing email messages. You can accept the Trend Micro default values set by the installation program or you can customize scanning by setting a number of configurations described in this chapter. You can configure ScanMail to run scans on-demand (manual scanning), according to a schedule (scheduled scanning), or in an ongoing and persistent manner (real-time scanning). You configure scans using the Security Risk Scan screen, accessible from the sidebar, or from the Manual Scan and Scheduled Scan screens.
The following describes the key characteristics of security risk scans:

#### Security Risk Scan Characteristics

Type of Scan | Characteristics
--- | ---
Scan method | There are two methods for security risk scans: Conventional Scan Smart Scan Configure the scan method on the Scan Service Settings screen (Smart Protection → Scan Service Settings). For details on scan methods, see Scan Service Settings.
Real-time scan | ScanMail scans the following in real time: All incoming and outgoing email messages Public-folder postings All server-to-server replications
Manual scan and scheduled scan | During manual and scheduled scans, ScanMail scans messages stored in the mailbox and public folder stores. Starting another scheduled scan does not interrupt the scheduled scan that is already in progress. ActiveUpdate does not interrupt a scheduled scan. On cluster servers: Each virtual server has a scan task list. You can specify the store database that belongs to the current virtual server. When there is a running scheduled scan task, new tasks are queued. When another task is triggered at the same time, then the task will be queued and finished eventually.