Malware Scanning checks every download as it transfers, at the network layer, so every browser and app is covered.
When scanning happens
Scanning happens while the file downloads. The file streams through the scanning service, and a malicious file never reaches the disk. Clean files land normally, with no separate scanning step afterwards.
How risk is decided
Each file gets a risk score that combines:
- signatures,
- domain, IP and file-hash reputation, and
- heuristics.
Why a file was stopped
Every blocked file shows its risk score in the console, so admins can see why it was stopped.