Trend Micro has changed the Smart Scan pattern and conventional virus pattern to include VSAPIX sections. This change started since the pattern version 18.579.00 was released. Both patterns will have 14 incremental pattern updates, and each could increase to up to 7MB worth of VSAPIX content.

Since both the Deep Security Agent and Deep Security Relay share the same update module configuration file, the relay will download the pattern update. Apparently, all the Deep Security agents will also download the incremental pattern updates. Normally, the incremental pattern size is around 10KB which is small but with the addition of the new pattern, downloading may impact the customer’s network as the download could increase exponentially.

Workaround

• users can group the agents to several groups, or use existing groups and assign separate scheduled security update tasks for each group. This can minimize the impact of the agents downloading the security updates in a period of time.
• users can temporarily disable the Scheduled Task responsible for triggering the security update of the agents until the long-term fix is released and applied.

Update

Temporary measures have been implemented to address the issue. The release frequency of the Smart Scan pattern and conventional virus pattern has been reduced but will be restored to its regular schedule on August 2, 2023. Please note that other Anti-Malware patterns, such as Spyware & Behavior Monitoring patterns, remain unaffected.

Additionally, an enhancement is planned for the next agent release cycle, targeted for the August release. This enhancement will effectively prevent a recurrence of this issue in the future.