{"id":8982,"date":"2026-10-20T20:27:28","date_gmt":"2026-10-20T17:27:28","guid":{"rendered":"https:\/\/support.withsecure.com\/support-articles\/how-configure-real-time-scanning-for-elements-linux-protection\/"},"modified":"2026-10-20T20:27:28","modified_gmt":"2026-10-20T17:27:28","slug":"how-configure-real-time-scanning-for-elements-linux-protection","status":"publish","type":"support_article","link":"https:\/\/support.withsecure.com\/de\/support-articles\/how-configure-real-time-scanning-for-elements-linux-protection\/","title":{"rendered":"How configure real-time scanning for Elements Linux Protection?"},"content":{"rendered":"

Issue:<\/h3>\n

Elements Linux Protection real-time scanning doesn't detect an eicar file (it does not rename it).\u00a0
However, if use "\/opt\/f-secure\/linuxsecurity\/bin\/fsanalyze" to manually scan the file, it will be detected\/renamed (.malware extension is added) correctly.\u00a0<\/p>\n

How to configure real-time scanning for Elements Linux Protection?\u00a0<\/p>\n

Resolution:<\/h3>\n

Elements Linux Protection by default has real-time scanning enabled in the Elements configuration profile, but the Files and folders to scan <\/strong>is by default empty. This means that to\u00a0 have real-time scanning to scan objects, you need to add the folders you want to have included in real-time scanning in the profile:<\/p>\n

    \n
  1. Log in to Elements Security Center portal<\/li>\n
  2. Navigate to the Security configurations > Profiles<\/strong><\/li>\n
  3. Go to the For Linux <\/strong>tab<\/li>\n
  4. Open the profile that used by the device<\/li>\n
  5. Go to the Real-time<\/strong> scanning <\/b>settings page<\/li>\n
  6. Under Files and folders to scan<\/b>, click Add path<\/strong><\/li>\n
  7. Insert the file\/folder path that need to be scanned by real-time scanning\n
      \n
    1. If you want to have everything scanned, use "\/"<\/li>\n<\/ol>\n<\/li>\n
    2. Click Save profile<\/strong><\/li>\n<\/ol>\n

      \u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"

      When I use cat or vi command to run the eicar file, but it is not being detected\/renamed.\u00a0
      \nHowever, if use „\/opt\/f-secure\/linuxsecurity\/bin\/fsanalyze“ to scan the file, it will be detected\/renamed (.malware extension is added) correctly.\u00a0<\/p>\n","protected":false},"template":"","support_article_product":[99],"class_list":["post-8982","support_article","type-support_article","status-publish","hentry"],"acf":{"source_foreign_id":"000007390","source_version":1,"source_system":"salesforce","source_date_updated":"2026-10-20 16:40:51","import_hash":"06ff363a8aa1574773e47d663866d084d05786fe","vanilla_article_id":"","vanilla_url":"","vanilla_kb_id":"","vanilla_category_id":"","machine_translated":false,"reactions_helpful_yes":"","reactions_helpful_no":""},"_links":{"self":[{"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/support_article\/8982","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/support_article"}],"about":[{"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/types\/support_article"}],"wp:attachment":[{"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/media?parent=8982"}],"wp:term":[{"taxonomy":"support_article_product","embeddable":true,"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/support_article_product?post=8982"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}