Conditions for anti-virus scan of virtual machines

December 13, 2023

ID 59625

Kaspersky Security scans virtual machines that meet the following conditions:

  • For powered-off virtual machines: NTFS, FAT32, EXT2, EXT3, EXT4, XFS or BTRFS file system is used on the virtual machine.
  • For powered-on virtual machines:
    • The Guest Introspection Thin Agent component is installed on the virtual machine. The NSX File Introspection Driver acting as the Guest Introspection Thin Agent component must be running on the virtual machines with Windows operating system. It starts automatically after VMware Tools are installed and the operating system is restarted.
    • The virtual machine is included in the NSX Group managed by the NSX Policy which uses the file system protection service (Kaspersky File Antimalware Protection).

      Kaspersky Security can scan powered-off virtual machines with the NTFS, FAT32, EXT2, EXT3, EXT4, XFS, or BTRFS file system according to the scan settings, regardless of whether or not those virtual machines are included in the NSX Group.

If even one of the listed conditions is not fulfilled, Kaspersky Security does not scan the virtual machine.

Kaspersky Security also does not scan a virtual machine when one of the following conditions is met:

  • The virtual machine is added to the list of VMware virtual infrastructure objects (Inventory) or the virtual machine is created on the VMware ESXi hypervisor after the scan task was started.
  • The virtual machine was removed from the list of VMware virtual infrastructure objects (Inventory) before the scan of this virtual machine started.
  • The virtual machine included in the scope of a running scan task migrates to the VMware ESXi hypervisor on which the scan task was not started.

Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.