About the types of Auto-Protect

Auto-Protect scans files as well as certain types of email and email attachments.
By default, all types of Auto-Protect are enabled. If you use a server-based email scanning solution such as Symantec Mail Security, you might not need to enable Auto-Protect for email.
Mac clients and Linux clients do not support email Auto-Protect scans.
Types of Auto-Protect
Type of Auto-Protect
Description
Auto-Protect
Continuously scans files as they are read from or written to the client computer.
Auto-Protect is enabled by default for the file system. It loads at computer startup. It inspects all files for viruses and security risks, and blocks the security risks from being installed. It can optionally scan files by file extension, scan files on remote computers, and scan floppies for boot viruses. It can optionally back up files before it attempts to repair the files, and terminate processes and stop services.
You can configure Auto-Protect to scan only selected file extensions. When Auto-Protect scans the selected extensions, it can also determine a file's type even if a virus changes the file's extension.
For those clients that do not run email Auto-Protect, your client computers are still protected when Auto-Protect is enabled. Most email applications save attachments to a temporary folder when users launch email attachments. Auto-Protect scans the file as it is written to the temporary folder and detects any virus or security risk. Auto-Protect also detects the virus if the user tries to save an infected attachment to a local drive or network drive.
Microsoft Outlook Auto-Protect
(Windows only)
Downloads incoming Microsoft Outlook email attachments and scans for viruses and security risks when the user reads the message and opens the attachment.
The Outlook Auto-Protect plug-in supports Microsoft Outlook 98 through Outlook 2016 and Outlook 365 for the MAPI or Internet protocols. Outlook Auto-Protect supports 32-bit and 64-bit systems.
If Microsoft Office 365 or Microsoft Office 2013 are installed with SEP 12.1.2 and earlier, and Microsoft Outlook 2016 installed with SEP 14, you may need to disable the Outlook Auto-Protect plug-in. See:
During installation,
Symantec Endpoint Protection
installs Microsoft Outlook Auto-Protect if you include it in the package and Microsoft Outlook is already installed on the computer.
If a user downloads a large attachment over a slow connection, mail performance is affected. If you know the document is safe, you can create an exception.
For more information, see:
You should not install Microsoft Outlook Auto-Protect on a Microsoft Exchange Server. Instead you should install Symantec Mail Security for Microsoft Exchange.
Internet Email Auto-Protect
(Windows only)
This feature is only available for client versions earlier than 14.2 RU1.
Scans inbound Internet email body and email attachments for viruses and security risks; also performs outbound email heuristics scanning.
By default, Internet Email Auto-Protect supports encrypted passwords and email over POP3 and SMTP connections. Internet Email Auto-Protect supports 32-bit or 64-bit systems. If you use POP3 or SMTP with Secure Sockets Layer (SSL), then the client detects secure connections but does not scan encrypted messages.
For performance reasons, Internet Email Auto-Protect for POP3 is not supported on server operating systems.
Email scanning does not support IMAP, AOL, or HTTP-based email such as Hotmail or Yahoo! Mail.
Lotus Notes Auto-Protect
(Windows only)
This feature is only available for client versions earlier than 14.2 RU1.
Scans incoming Lotus Notes email attachments for viruses and security risks.
Lotus Notes Auto-Protect supports Lotus Notes 7.x or later.
During installation,
Symantec Endpoint Protection
installs Lotus Notes Auto-Protect if you include it in the package and Lotus Notes is already installed on the computer.
More information