Skip to content

Understand website and email scan scheduling

cPFence v4+ website protection checks changed files every two minutes. Mailbox scanning is enabled separately. Support users need access to the server and the relevant scan/history or protection-setting permissions.

Task Guide
Enable or disable changed-file checks Malware real-time protection
Faster scanning on a capable server Proactive scanning
Enable scanning or exclude one mailbox Mailbox scanning
Move infected messages or report them Email quarantine
Add mailbox spam rules Email spam protection
Move website detections or report them Automatic quarantine
  1. Open Threat & Malware Detection and choose one server in Server scope.
  2. In Scan Summary, read the protection card.
  3. Filter Recent scans by Real-time and inspect the latest result.

Scan Summary with the selected server, protection reminders and the Recent scans Mode filter.

Use the Mode filter to find real-time checks. This example shows a clean custom scan, not a completed real-time check. Select the image for full size; use browser Back to return.

The card also shows when protection is off or starting. When real-time scanning is delayed, it shows one of these messages:

Card heading Meaning What to do
Scanning is running behind High server load delayed scanning. Changed files are queued. Nothing; scanning catches up automatically.
Your server is under heavy load Scanning is temporarily slowed. Nothing is skipped. Nothing; full speed resumes when the load drops.
Real-time scanning needs attention No scan check has completed in over 60 minutes. Check the server’s CPU and memory usage, or restart cPFence.

Detection Settings showing separate Email Scanning, Email Quarantine and Email Spam Protection switches.

Mailbox scanning, quarantine and spam protection have separate controls. Shown values are existing saved settings. Select the image for full size; use browser Back to return.

Enabled Full and Smart scans can include mail; Custom path remains a website-path scan. Scheduled mailbox eligibility is checked at minute :50 with MRTP enabled. Full-license proactive operation is normally hourly when resources permit; free or non-proactive eligibility is every 12 hours. A busy scanner or resource condition can defer work.

Review mail counts and errors in scan output. A failed or stopped phase can have partial findings; it does not cover every eligible message. In System Settings → Notification Settings, review Email threat notifications and Successful scan notifications. A finding or submitted notification does not prove recipient receipt.