ESET Online Help

Search English
Select the topic

Real-time File System Protection

Real-time file system protection controls all antivirus-related events in the system. All files are scanned for malicious code when opened, created, or run on your computer. By default, Real-time file system protection launches at system start-up and provides uninterrupted scanning.

To configure the ESET Endpoint Antivirus for macOS remotely:

1.In ESET PROTECT On-Prem, click Policies > New policy and type a name for the policy.


note

To adjust the settings in an existing policy for ESET Endpoint for macOS (V7+), click the policy you want to change in the list of policies and click Edit > Settings.

2.Click Settings and select ESET Endpoint for macOS (V7+) from the drop-down menu.

3.Adjust the desired settings.

4.Click Continue > Assign and select the appropriate group of computers.

5.Click OK > Finish.


note

To configure the ESET Endpoint Antivirus for macOS locally see application preferences.

In Detection Engine > Real-time File System Protection, you can configure the following settings:

Basic

By default, Real-time file system protection launches at system start-up and provides uninterrupted scanning. In special cases (for example, if there is a conflict with another real-time scanner), you can disable Real-time file system protection by clicking the slider bar next to Enable Real-time file system protection.

Media to scan

By default, all types of media are scanned for potential threats:

Local drives – Controls all system hard drives.

Removable media – Controls CD/DVD's, USB storage, Bluetooth devices, etc.

Network drives – Scans all mapped drives.

ESET recommends using default settings and only modifying them in specific cases, such as when scanning certain media significantly slows data transfers.

Scan on

By default, all files are scanned upon opening, creation, or execution. We recommend that you keep these default settings, as they provide the maximum level of real-time protection for your computer:

File open – Enables or disables scanning when files are opened.

File creation – Enables or disables scanning when files are created.

Removable media access – Enables or disables automatic scan of removable media when connecting to the computer.

Processes exclusions

Processes to be excluded from scanning – By excluding processes from being scanned, the time needed to scan the system for the presence of malware can be significantly decreased.

To create an exclusion:

1.Click Edit next to Processes to be excluded from scanning.

2.Click Add and define the path to the executable.

3.Click Save > Save to create the exclusion and close the dialog.

ThreatSense parameters

Real-time file system protection checks all types of media and is triggered by various system events such as accessing a file. Using ThreatSense technology detection methods (as described in the ThreatSense parameters section), Real-time file system protection can be configured to treat newly created files differently than existing files. For example, you can configure Real-time file system protection to more closely monitor newly created files.