Yes, there is an on demand scan task for each product.
You will need to configure one task at the ePO directory level per product you have deployed.
In the tasks tab - right mouse click - Schedule Task.
It is worth changing the defaults to suit the specification of the machines you are scanning, ie. only default file types, particular drives, directories, heuristics etc. to reduce the load on the machine during the scan.
This can leave the machine vulnerable but it is a load balancing act.
For instance I have previously excluded certain areas from the on-access scan to reduce load on a machine. Then scheduled and out-of-hours scan on the excluded area.
That was in relation to the Microsoft SMS client which constantly wrote data to a directory causing it to be constantly scanned and rescanned by the on-access scanner.
