HI,

What is the main work of proactive threat protection

http://www.symantec.com/business/support/index?page=content&id=TECH102733

https://www-secure.symantec.com/connect/articles/truscan-overview

Check this thread also

https://www-secure.symantec.com/connect/forums/pro...

PTP is behvious based engine to know malware from running processes.

Hello,

Proactive threat scanning uses heuristics to detect unknown threats. Heuristic process scanning analyzes the behavior of an application or process to determine if it exhibits characteristics of threats, such as Trojan horses, worms, or keyloggers. This type of protection is sometimes referred to as zero-day protection.

Please find these useful articles:

What is Proactive Threat Protection?

http://www.symantec.com/docs/TECH102733

What's new in Symantec Endpoint Protection 11.0

http://www.symantec.com/docs/TECH102401

Symantec Endpoint Protection 11.0 Frequently Asked Questions

http://www.symantec.com/docs/TECH102211

Hope that helps!!

Proactive threat scanning provides an additional level of protection to a computer that complements existing AntiVirus, AntiSpyware, Intrusion Prevention, and Firewall protection technologies. AntiVirus and AntiSpyware scans rely mostly on signatures to detect known threats. Proactive threat scans use heuristics to detect unknown threats. The Heuristic process scan analyzes the behavior of an application or a process. The scan determines if the process exhibits the characteristics of a threat, such as Trojan horses, worms, or key loggers.