Product guide

Determining the number of scanning policies
Follow this process to determine whether to configure more than one on-access scanning policy:
Determining which risk to assign to a process
Once you decide that you need more than one scanning policy, identify your processes and
determine which risk to assign to each one.
Task
1 Determine which processes you are using. Use the Windows Task Manager or Windows
Performance Monitor to help you understand which processes are using the most CPU time
and memory.
2 Determine which program is responsible for each process. Remember that only the child
processes of the defined parent process adhere to the scanning policy. For example, if you
define the Microsoft Word executable file, WINWORD.EXE, as a high-risk process, any
Microsoft Word documents that are accessed would be scanned according to the high-risk
scanning policy. However, when the parent process Microsoft Word is launched, the
WINWORD.EXE file is scanned according to the policy of the process that launched it.
3 Determine which risk applies to each process using these guidelines:
• Low-risk — Processes with less possibility of spreading or introducing a potential threat.
These can be processes that access many files, but in a way that has a lower risk of
spreading potential threats. For example:
Scanning Items On-Access
Determining the number of scanning policies
31McAfee VirusScan Enterprise 8.7i