Switching Scan Methods

The following table outlines Trend Micro recommended best practices when switching the endpoint’s scan method to smart scan.

See Protecting Endpoints Using Smart Scan for information on how to switch an endpoint’s scan method

Table 1. SPR Hardware Specifications
Relay Hardware Specification Recommendation

Standard/High-end
  • Use an AD group or Subnet Address to switch scan methods.
  • Before switching to smart scan, deploy the Smart Protection Server List to SPRs:.
  • After switching the scan method to smart scan, leave the endpoints running for 1 day, so the smart scan cache builds up to at least 50%.

  • Up to 4000 endpoints can be switched to use smart scan on a single Relay.

Low-end

Relays with low-end hardware can support up to 1000 endpoints that use smart scan.

  • If Relays with low-end hardware need to support more than 1000 endpoints that use smart scan, increase the Relays’ hardware resources, before deploying SPR.

  • You could also add one more Relay to the site, and move some endpoints to the new Relay, before deploying SPR.