Scheduled scans

You may schedule scanning for viruses in one of three ways. FortiClient does not support multiple instances of the <scheduled_scans> element.

Scan type	Description
Quick scan	Runs the rootkit detection engine to detect and remove rootkits. The quick scan only scans the following items for threats: executable files, DLLs, and drivers that are currently running.
Full scan	Runs the rootkit detection engine to detect and remove rootkits, then performs a full system scan of all files, executable files, DLLs, and drivers. If Full is selected, you have the following options: Scan removable media, if present Scan network drives
Custom scan	Runs the rootkit detection engine to detect and remove rootkits. Use the <directory> element to enter the full path of the folder on your local hard disk drive that will be scanned.

You can enable only one scheduled scan at a time. For example, you can enable a full scan and disable quick scans and custom scans.

Each of three scheduling options require specific combinations of several common elements, which define when scanning should occur. The common elements are described first. Other elements specific to the full and custom scans are described later.

The factory default at the time of installation is to run a full scan on the first day of the month at 19:30.

<forticlient_configuration>

<antivirus>

<scheduled_scans>

<ignore_3rd_party_av_conflicts>1</ignore_3rd_party_av_conflicts>

<quick>

<enabled>1</enabled>

<repeat>0</repeat>

<time>19:30</time>

</quick>

</scheduled_scans>

<scheduled_scans>

<ignore_3rd_party_av_conflicts>1</ignore_3rd_party_av_conflicts>

<full>

<enabled>0</enabled>

<repeat>0</repeat>

<time>19:30</time>

<removable_media>1</removable_media>

<network_drives>1</network_drives>

<priority>2</priority>

</full>

</scheduled_scans>

<scheduled_scans>

<ignore_3rd_party_av_conflicts>1</ignore_3rd_party_av_conflicts>

<enabled>1</enabled>

<repeat>0</repeat>

<days>2</days>

<time>19:30</time>

<directory>c:\</directory>

<priority>0</priority>

</directory>

</scheduled_scans>

</antivirus>

</forticlient_configuration>

Following is an example of the elements for a quick monthly scan:

<scheduled_scans>

<ignore_3rd_party_av_conflicts>1</ignore_3rd_party_av_conflicts>

<quick>

<enabled>1</enabled>

<repeat>2</repeat>

<day_of_month>1</day_of_month>

<time>19:30</time>

</quick>

</scheduled_scans>

Following is an example of the elements for a quick weekly scan:

<scheduled_scans>

<ignore_3rd_party_av_conflicts>1</ignore_3rd_party_av_conflicts>

<quick>

<enabled>1</enabled>

<repeat>1</repeat>

<days>1</days>

<time>19:30</time>

</quick>

</scheduled_scans>

Following is an example of the elements for a quick daily scan:

<scheduled_scans>

<ignore_3rd_party_av_conflicts>1</ignore_3rd_party_av_conflicts>

<quick>

<enabled>1</enabled>

<repeat>0</repeat>

<time>19:30</time>

</quick>

</scheduled_scans>

The following table provides the XML tags for scheduled scans, as well as the descriptions and default values where applicable. These elements are common to all scheduled scan types:

XML tag	Description	Default value
<enabled>	Enable scheduled scans. You can enable only one of the following scan types at a time: quick, full, or custom. Boolean value: [0 | 1]
<repeat>	Frequency of scans. The selected frequency affects the elements required to correctly configure the scan. Examples are provided before the table. Select one of the following: 0: daily 1: weekly 2: monthly
<days>	Day of the week to run the scan. Used when <repeat> is set to 1 for weekly scans. Enter one of the following: 1: Sunday 2: Monday 3: Tuesday 4: Wednesday 5: Thursday 6: Friday 7: Saturday
<day_of_month>	The day of the month to run a scan. Used when <repeat> is set to 2 for monthly scans. Enter a number from 1 to 31. If you configure monthly scans to occur on the 31st of each month, the scan occurs on the first day of the month for months with fewer than 31 days.
<time>	Configure the start time for the scheduled scan, using a 24-hour clock.

The following table provides full scan and custom scan element XML tags, the description, and the default value (where applicable).

XML tag	Description	Default value
<full> elements
<removable_media>	Scan connected removable media, such as USB drives, for threats, if present. Boolean value: [0 | 1]	1
<network_drives>	Scan attached or mounted network drives for threats. Boolean value: [0 | 1]	0
<priority>	Scan priority. This refers to the amount of processing power the scan uses and its impact on other processes. Enter one of the following: 0: normal 1: low 2: high	0
<directory> elements
<directory>	The full path to the directory to scan when using a custom scan.
<priority>	Scan priority. This refers to the amount of processing power the scan uses and its impact on other processes. Select one of the following: 0: normal 1: low 2: high