I have just setup the endpoint server and the endpoint agent on a few test workstaions.
I put a test file on the endpoints that contained test social security number and credit card numbers and did a manual scan and was able to find the matches.
Before I deploy the agent to more endpoints I would like to configure an automated report every morning on all the endpoints that had matches of ssns and credit cards from the policies I have already set up.
Now, how should this be automated? Do I need to schedule a scan on a schedule? Does the agent do a full scan and index of the hard disk on a schedule or does it find the matching data instantly on access or both?
I would think scans should be scheduled during the night so they don't impact performance when the users are using their computers, but if they are scheduled durning the night, all laptops and some desktops that are powered off during the night will just keep missing the schedule and may mever get scanned. How is the handled?