In one embodiment, a content filtering system scans an incoming data for malicious content against a portion or the entirety of its knowledge base. If the incoming data is not detected to contain malicious content, the incoming data is forwarded to a content filtering agent that may perform further scanning of the incoming data against portions of its knowledge base that were not employed by the content filtering system. This advantageously allows a complete knowledge base to be segmented, with different computers scanning an incoming data using different segments of the knowledge base. The content filtering system and content filtering agent may be antivirus programs, while the knowledge bases may be virus/pattern files, for example.