Auto-Protect scanning provides continuous risk and violation detection. When you enable Auto-Protect scanning, Mail Security scans email messages as they pass through the Exchange server. Infected message bodies and attachments and rule violations are detected on a real-time basis, based on the settings that you enable and configure.
You must enable Auto-Protect scanning to perform background scanning.
To configure Auto-Protect scanning
In the console on the primary navigation bar, click Scans.
In the sidebar under Views, click Auto-Protect.
In the content area, under Auto-Protect Settings, check Enable Auto-protect.
On the toolbar, click Deploy changes to apply your changes.
If the Auto-Protect status on the SMSMSE UI is seen as "Started (VSAPI is still down)", the transport scan functionality works seamlessly but the On Access scan and Background scanning functionality may not function.