Creating exclusions for Adaptive Defense and Endpoint Protection products

Informatie van toepassing op:

Situation

You need to exclude files and/or folders from scanning in Adaptive Defense and Endpoint Protection products.

Preliminary steps

Before applying any exclusion for the permanent protection, ensure the following statements are true:

• Folder exclusions:
  • Exclusions CONTAIN full path.
  • Exclusions DO NOT CONTAIN mapped drives.
  • Exclusions to network locations CONTAIN full UNC path.
  • User environment and variables are NOT supported (except for the Advanced Protection featured in Adaptive Defense 360 and Adaptive Defense).
  • Wildcards and question marks are NOT supported.
    
    Examples of CORRECT folder exclusions:
    
    C:\windows\system32
    \\192.168.21.23\test
    %ProgramFiles%\Test
    
    Examples of INCORRECT folder exclusions:
    
    Z:\ (where z is a mapped drive)
    C:\temp*\
    C:\?indows
• File exclusions:
  • Exclusions CONTAIN full path.
  • Exclusions DO NOT CONTAIN mapped drives.
  • Exclusions to network locations CONTAIN full UNC path.
  • Wildcards and question marks are NOT supported.
    
    Examples of CORRECT exclusions:
    
    C:\windows\system32\filename.dll
    
    Examples of INCORRECT exclusions:
    
    C:\Wind*\System32\test.exe
    C:\windows\????.dll

Solution

Follow the instructions below in order to exclude elements from the scan:

NOTE: The example below covers excluding files for an individual Windows server (an Exchange server), but the procedure to exclude files for a workstation or a group of machines is the same. Just right click on the appropriate container in the console.

1. Access the Web Console.
2. In the Settings tab, Profiles section, select the profile that is applied to the server where the Exchange is installed.
3. Once in the Edit Profile screen, select Antivirus option and once there, in the Files tab, click Advanced settings.
4. On the Advanced settings screen enter any needed exclusions, such as:
   • Directories
   • files
   • extensions
5. Once all exclusions have been included, save the changes. These changes will be applied in the next update of the signature file.
   
   

• In the case of using ASP.net applications, find out which folders to exclude from the antivirus scan by reading the MSDN (Microsoft Development Network) article called ASP.net Anti-virus Exclusion List.
• For additional information on the latest Microsoft exclusions, you can periodically review the Microsoft Anti-Virus Exclusion List page available in Microsoft's TechNet Wiki page.
• For information on the recommended exclusions for Terminal Server, check the following Microsoft TechNet article.

Useful links

Exchange Server logs or database files are locked or quarantined while the Exchange Server tries to use the file