It works on demand (scanning, interface), but the OP wants it run protecting.