Norman Sandbox should be enabled in all mail scanning modules, like NIP (Norman Internet Protection), NVC for Lotus Domino, NVC for Exchange and NVC for Mimesweeper.

You can also enable Norman Sandbox for regular on-demand scans, and configure a task file to do a sandbox scan every now and then. If the speed of the scan is important, you should not enable it for on-demand scans.

Norman Sandbox is enabled for on-access remote writing of files e.g. writing on servers running Norman Virus Control.