Malware Scan Mode: Batch vs. Real-time

Question

Hi All, 
 I migrated from UTM 9 to XG recently and started to search the forums for some nice tweaks, tips and best practices just like the ones we have for the UTM. 
 One discussion I'm missing when it comes to performance optimizations is the malware scan mode selection. 
 It would be interesting to hear/read whether you are using/prefering the Batch or the Real-time mode and why. 
 
 I'm using the Batch mode with dual scan for files up to 50MB right now. 
 I wonder if the Real-time mode could be a nice booster for the first page impression which sometimes delays the loading process of the complete website for some seconds. 
 However I cannot really rate the possible impact of the protection loss. 
 
 Thanks and Best Regards 
 Dom Nik

lferrara · Answer

DomNik , 
 in real mode, XG scan packets on the fly while using batch mode, the file is downloaded on a temporary folder and once the download completes, the scan begins. 
 So real mode is faster but I guess that there is some traffic that cannot be scanned on the fly. 
 Regards