Learn about exceptions

You use exceptions to exclude items from scans and protection on your client computers.

See About exceptions to Symantec Endpoint Protection Small Business Edition.

Review the types of files and folders that Symantec Endpoint Protection Small Business Edition automatically excludes from scans

Symantec Endpoint Protection Small Business Edition automatically creates exceptions, or exclusions, for some third-party applications and some Symantec products.

You can also configure individual scans to scan only certain extensions and skip any other extensions.

See About the files and folders that Symantec Endpoint Protection excludes from virus and spyware scans.

Create exceptions for scans

You add exceptions in an Exceptions policy directly. Or you can add exceptions from log events on the Monitors page.

See Creating exceptions for Symantec Endpoint Protection Small Business Edition.

See Creating exceptions from log events in Symantec Endpoint Protection Manager.

Restricting the types of exceptions that users can configure on client computers

By default, users on client computers have limited configuration rights for exceptions. You can restrict users further so that they cannot create exceptions for virus and spyware scans or for SONAR.

Users can never force an application detection and they never have permission to create Tamper Protection exceptions.

See Restricting the types of exceptions that users can configure on client computers.

Check the logs for detections for which you might want to create exceptions

After Symantec Endpoint Protection Small Business Edition makes a detection, you can create an exception for the detection from the log event.

For example, you might want to create an exception for a file that scans detect but that your users request to download.

See Creating exceptions from log events in Symantec Endpoint Protection Manager.

Configure intrusion prevention exceptions

You can specify exceptions for intrusion prevention.

Intrusion prevention exceptions are configured in an Intrusion Prevention policy.

See Managing intrusion prevention on your client computers.