The latest update to Zenarmor's Policy UI brings a powerful new capability to your fingertips, Real-Time File Scanning, now accessible within the all-new Content Inspection tab. This feature takes Zenarmor's already advanced inspection engine one step further, ensuring every file that moves through your network, whether it's downloaded from the web, shared via cloud storage, or transferred internally, is scanned instantly for hidden threats.
Why Real-Time File Scanning is Important
As organizations continue to enable distributed work and cloud collaboration, file sharing has become one of the most common infection vectors for ransomware, trojans, and zero-day malware. Traditional security solutions often rely on delayed or periodic scanning, leaving small but critical exposure windows.
Zenarmor's real-time file scanning closes that gap by analyzing files at the moment of transfer, before the user can open them.
Zenarmor supports the real-time inspection of common file types often used by bad actors to hide malicious payloads, including:
- Windows EXE (executable)
- Linux ELF (executable)
- MacOS Mach-O (executable)
- Android Dex (executable)
- ZIP
- Web Assembly
- Shell Script
How It Works
By selecting the new Content Inspection tab in the policy creation interface in Zenconsole, administrators can easily enable or refine file-scanning policies as part of their broader Secure Web Gateway (SWG) or CASB rules.
- When a user initiates a file download, Zenarmor intercepts the transfer at the enforcement point, whether on the endpoint, edge, or cloud workload.
- The file is scanned against multiple signature and heuristic engines in real time.
- Suspicious or malicious files are blocked immediately, with the event logged and visible within your Zenconsole dashboard for instant review.
Figure 1: Real-time File Scanning configuration tab.
Key Benefits
- Instant Threat Detection Block malware, ransomware, and zero-day payloads the moment they appear in transit.
- Unified Policy Control Manage file scanning, content filtering, and threat inspection all within a single, centralized policy UI.
- Applies Everywhere Protection follows the user, whether traffic flows through an endpoint, a gateway, or a cloud workload.
- No Latency Trade-Off Leveraging Zenarmor's decentralized Single-App, Single-Pass, Single-Stack inspection model, files are scanned locally or as close to the data source as possible, avoiding cloud backhaul delays common with traditional cloud-only SASE providers.
- Complete Visibility Security events, user actions, and file scan results are displayed in real time on the Zenconsole dashboard.
With Real-Time File Scanning, Zenarmor continues to push the boundaries of what's possible in distributed network security. By integrating advanced content inspection directly into your policy framework, we're helping security teams detect and stop threats instantly, before they become incidents.
Experience how Zenarmor SASE Anywhere Architecture™ delivers next-generation SASE protection without compromise.
For full details, see the SASE 2.1 Release Notes.
