WithSecure Atlant for Offload Scanning Server

What is included in WithSecure Atlant for Offload Scanning Server?

Offload scanning server – Dedicated server that scans files sent from protected virtual machines.
Content reputation service – Checks files and web content against WithSecure Security Cloud threat data.
Multiple scanning engines – Layered detection engines analyse every file the endpoints hand over.
Three deployment formats – VMware OVA appliance, or DEB and RPM packages for Linux servers.
Policy Manager integration – Centrally managed servers appear in Policy Manager Console for configuration.
Important – No endpoint protection included; requires Client Security or Server Protection.

What are the main benefits of WithSecure Atlant for Offload Scanning Server?

WithSecure Atlant for Offload Scanning Server is the dedicated scanning and reputation server of WithSecure Virtual Security, managed centrally in WithSecure Policy Manager together with the endpoints it serves. It is the successor to F-Secure Atlant for Virtual Environments, and environments still running F-Secure Scanning and Reputation Server can switch by changing the server address in the existing policy.

Lower VM resource use – Virtual machines spend less CPU, memory and disk on scanning.
Simple migration path – Existing offload policies switch over by changing one server IP address.
Template-based rollout – Agents install once on templates, clones inherit the offload configuration.
Virtual and physical – One Virtual Security package covers mixed, hybrid and purely virtual estates.
Shared threat intelligence – Security Cloud lookups add current reputation data to local scanning.
One administration console – Offload server, workstations and servers are configured in Policy Manager.

Which company size is WithSecure Atlant for Offload Scanning Server suitable for?

The deciding factor is not headcount but whether a company runs virtual desktops (VDI) or many virtual servers on shared hosts. When dozens of virtual machines scan the same files at the same time, the host becomes the bottleneck. This is the problem an offload scanning server solves, so the product becomes relevant from the first larger virtualisation cluster onwards.

Does WithSecure Atlant for Offload Scanning Server meet the requirements of Swiss cybersecurity legislation?

The revised Information Security Act obliges operators of critical infrastructure, such as energy, healthcare, finance, transport and public authorities, to report cyberattacks to the Federal Office for Cybersecurity (BACS) within 24 hours of discovery. WithSecure Atlant for Offload Scanning Server supports the detection side of this duty: malware found on virtual desktops and servers is blocked and reported as an alert in WithSecure Policy Manager, which helps an administrator recognise an incident early. It does not provide a reporting workflow to BACS, a forensic timeline of the attack, EDR-style root-cause analysis, or long-term log retention. These elements must come from other tools and from an internal incident process. This information does not constitute legal advice; check your specific obligations with a qualified specialist.

Does WithSecure Atlant for Offload Scanning Server meet the requirements of European cybersecurity legislation?

No single product makes an organisation compliant with the NIS 2 Directive, because the directive requires a set of organisational and technical risk-management measures. These include risk analysis, incident handling, business continuity, supply chain security, vulnerability handling, access control, multi-factor authentication and cryptography. WithSecure Atlant for Offload Scanning Server contributes to the technical protection layer by keeping malware scanning active on virtual machines without overloading the hosts, and its alerts feed into incident handling. It does not cover backup and recovery, vulnerability or patch management, encryption, multi-factor authentication, or supplier risk assessment. Each of these needs its own measure.

Does WithSecure Atlant for Offload Scanning Server help with security questionnaires from large customers?

Partly, and only together with the WithSecure endpoint products it serves. With it, you can answer the questions on whether virtual desktops and servers run malware protection, whether that protection is centrally managed, and whether detections are reported to a central console. It does not answer questions on endpoint detection and response, patch and vulnerability management, disk encryption, multi-factor authentication, backups, or log retention for audits. WithSecure names WithSecure Elements as the replacement for Business Suite, and Elements covers EDR and vulnerability management within the same vendor family. Moving there is usually simpler than adding separate tools from other manufacturers to close these gaps.

Which limitations should you know before buying?

WithSecure Atlant for Offload Scanning Server protects nothing on its own. It is used by WithSecure Client Security, Client Security Premium and Server Protection agents, so it only makes sense when those agents are licensed and deployed. WithSecure has announced the end of life of WithSecure Business Suite for 30 September 2028, covering Policy Manager, Client Security, Server Security and Linux Security, with WithSecure Elements named as the replacement. Buyers planning beyond that date should include the migration in their budget. The ready-made OVA appliance is built for VMware; on other platforms, the server is installed from DEB or RPM packages on a Linux system that you provide and maintain yourself.

Frequently asked questions about WithSecure Atlant for Offload Scanning Server

Can Linux servers also use offload scanning?

Yes. WithSecure Linux Security 64 has its own offload scanning settings, so Linux servers managed in Policy Manager can send files to the Atlant server in the same way as Windows clients.