Support articles

Find clear, step-by-step solutions to common WithSecure issues across installation, configuration, updates, and product performance.

How does Network drive scanning work with Elements Endpoint Protection?

Issue:

How does the network drive scanning work?

Resolution:

Scan network drives setting is enabled by default.

How does it behave?

  • Scanning only happens upon execution of (executable) files on the network drive
  • Basic open / close, copy / paste operations for a file are not scanned
    #For Elements EPP, users can enable real time scan for those actions by setting profile "Scan network drives" as "Scan on any file access".  Note:  scanning files on network drive on every file access can be very slow.

Testing with EICAR test file:

  • The execution of an eicar.com file will only work on legacy 16-bit systems or those which support it. Most 64-bit systems do not support it and therefor a real time scan test will most likely not trigger an alert on that file.
  • However, the manual/scheduled scan will still detect the file