Preventing Symantec AntiVirus from scanning the temporary folder for Symantec products for Domino

Article:TECH79960  |  Created: 2002-01-17  |  Updated: 2011-03-30  |  Article URL http://www.symantec.com/docs/TECH79960
Article Type
Technical Solution

Product(s)

Environment

Issue



You have a Symantec product installed on your computer for your Lotus Domino environment. You also have another Symantec product to scan your file system on the same computer. Symantec AntiVirus (SAV) frequently detects viruses in the file system Temp folder. The Symantec product for Domino does not detect viruses, or detects them as scan errors.

 


Solution



Symantec AntiVirus detects temporary files from the Symantec product for Domino as if they were actual copies of the virus files. When this detection happens, the Symantec product for Domino cannot complete its scan successfully. Additionally, the Domino SMTP task may create temporary files that contain the bodies and the encoded attachments of infected emails. Symantec AntiVirus Corporate Edition may also detect these files.

To resolve this problem you must perform the following tasks:

  • Prepare a new temporary folder for the Symantec product for Domino.
  • Create exclusions for the new folder and the Domino temporary folder.


Prepare a new temporary folder for the Symantec product for Domino
You must create a new folder for your Symantec product to temporarily store files as they are scanned. Create a new folder on a drive with plenty of free disk space. For example, C:\SAVTEMP. After you create your new folder, configure the Symantec product for Domino to use the new folder.

To set the path for Symantec Mail Security 8.0 for Domino

  1. Open the Symantec Mail Security 8.0 for Domino settings database.
  2. In the right pane, double-click your server group.
  3. Click Threat/Security Risk > Basics.
  4. In the Directory for temporary files text box, type the path to the new temporary folder.
    For example, C:\SAVTEMP


To set the path for Symantec Mail Security 7.5.x for Domino

  1. Open the Symantec Mail Security 7.5.x for Domino settings database.
  2. In the right pane, double-click your server group.
  3. Click Threat/Security Risk > Basics.
  4. In the Directory for temporary files text box, type the path to the new temporary folder.
    For example, C:\SAVTEMP


To set the path for Symantec Mail Security 5.x for Domino

  1. Open the Symantec Mail Security 5.x for Domino settings database.
  2. In the right pane, double-click your server group.
  3. Click Threat/Security Risk > Basics.
  4. In the Directory for temporary files text box, type the path to the new temporary folder.
    For example, C:\SAVTEMP


To set the path for Symantec Mail Security 4.x for Domino

  1. Open the Symantec Mail Security 4.x for Domino settings database.
  2. In the right pane, double-click your server group
  3. Click AntiVirus > Basics.
  4. In the Directory for temporary files text box, type the path to the new temporary folder.
    For example, C:\SAVTEMP



Create the exclusions
The procedure to exclude your temporary folder depends on how you configured Symantec AntiVirus. You can install Symantec AntiVirus in one of the following configurations:

  • Unmanaged client
  • Managed client
  • Server


Follow the instructions for the type of Symantec AntiVirus installation that you performed.

For Symantec AntiVirus unmanaged clients
If you installed Symantec AntiVirus on your Domino server as an unmanaged client, then use Symantec AntiVirus user interface to configure exclusions.

To configure exclusions for real-time protection from within Symantec AntiVirus

  1. In the Symantec AntiVirus window, in the left pane, under Configure, click File System Realtime Protection.
  2. In the right pane, click Exclude selected files and folders.
  3. Click Exclusions.
  4. Check Check file for exclusion before scanning
  5. Click Files/Folders to create the exclusions.
  6. Exclude the temporary folder that you created.
  7. Exclude the temporary folder that Domino uses.
    The folder path varies between servers but uses the following name convention:
    <drive>:\<temp>\notesxxxxx

    Where <drive> is the drive letter and <temp> is the temporary folder for your operating system. For example, C:\Windows\Temp\notes6030C8


To configure exclusions for a scheduled scan from within Symantec AntiVirus

  1. In the Symantec AntiVirus window, in the left pane, click Scheduled Scans.
  2. Create a new scan, or select the scan you wish to configure, and click Next twice.
  3. Click the Options button in the lower-right corner.
  4. Click Exclude selected files and folders.
  5. Click Exclusions.
  6. Check Check file for exclusion before scanning
  7. Click Files/Folders to create the exclusions.
  8. Exclude the temporary folder that you created.
  9. If you use Symantec Mail Security 4.1.x for Domino, exclude the following folder:
    <drive>:/inetpub/mailroot

    Where <drive> is the drive letter.
  10. Exclude the temporary folder that Domino uses.
    The folder path varies between servers but uses the following name convention:
    <drive>:\<temp>\notesxxxxx

    Where <drive> is the drive letter and <temp> is the temporary folder for your operating system. For example, C:\Windows\Temp\notes6030C8
     

To start a manual scan with the appropriate exclusions from within Symantec AntiVirus

  1. In the Symantec AntiVirus window, in the left pane, under Scan, click Scan Computer.
  2. Click the Options button in the lower-right corner.
  3. Click Exclude selected files and folders.
  4. Click Exclusions.
  5. Check Check file for exclusion before scanning
  6. Click Files/Folders to create the exclusions.
  7. Exclude the temporary folder that you created.
  8. If you use Symantec Mail Security 4.1.x for Domino, exclude the following folder:
    <drive>:/inetpub/mailroot

    Where <drive> is the drive letter.
  9. Exclude the temporary folder that Domino uses.
    The folder path varies between servers but uses the following name convention:
    <drive>:\<temp>\notesxxxxx

    Where <drive> is the drive letter and <temp> is the temporary folder for your operating system. For example, C:\Windows\Temp\notes6030C8



For Symantec AntiVirus managed clients
If you installed Symantec AntiVirus on your Domino server as a managed client, then use the Symantec System Center to make all of your configuration changes. Start the manual scan from the Symantec AntiVirus user interface.

 


Note: You should not install Symantec AntiVirus as a managed client on your Domino server unless you have a client group specifically for Domino servers.



To configure exclusions for Realtime Protection from the Symantec System Center

  1. In the Symantec System Center, unlock the server group.
  2. Under Groups, right-click the client group, and then click All Tasks > Symantec AntiVirus > Client Realtime Protection Options.
  3. Click Exclusions.
  4. Check Check file for exclusion before scanning
  5. Click Files/Folders to create the exclusions.
  6. Exclude the temporary folder that you created.
  7. Exclude the temporary folder that Domino uses.
    The folder path varies between servers but uses the following name convention:
    <drive>:\<temp>\notesxxxxx

    Where <drive> is the drive letter and <temp> is the temporary folder for your operating system. For example, C:\Windows\Temp\notes6030C8


To configure exclusions for a scheduled scan from the Symantec System Center

  1. In the Symantec System Center, unlock the server group.
  2. Under Groups, right-click the client group, and click All Tasks > Symantec AntiVirus > Scheduled Scans.
  3. Create a scheduled scan, or edit an existing one.
  4. Click Scan Settings.
  5. Click Options.
  6. Check Exclude files and folders then click Exclusions.
  7. Check Check file for exclusion before scanning.
  8. Click Files/Folders to create the exclusions.
  9. Exclude the temporary folder that you created.
  10. Exclude the temporary folder that Domino uses.
    The folder path varies between servers but uses the following name convention:
    <drive>:\<temp>\notesxxxxx

    Where <drive> is the drive letter and <temp> is the temporary folder for your operating system. For example, C:\Windows\Temp\notes6030C8


To start a manual scan with the appropriate exclusions from within Symantec AntiVirus

  1. In the Symantec AntiVirus window, in the left pane, under Scan, click Scan Computer.
  2. In the lower right corner, click Options
  3. Check Exclude selected files and folders.
  4. Click Exclusions.
  5. Check Check file for exclusion before scanning
  6. Click Files/Folders to create the exclusions.
  7. Exclude the temporary folder that you created.
  8. If you use Symantec Mail Security 4.1.x for Domino, exclude the following folder:
    <drive>:/inetpub/mailroot

    Where <drive> is the drive letter.
  9. Exclude the temporary folder that Domino uses.
    The folder path varies between servers but uses the following name convention:
    <drive>:\<temp>\notesxxxxx

    Where <drive> is the drive letter and <temp> is the temporary folder for your operating system. For example, C:\Windows\Temp\notes6030C8



For Symantec AntiVirus servers
If you installed Symantec AntiVirus on your Domino server as a server, then use the Symantec System Center to make all of your configuration changes. Start the manual scan from the Symantec AntiVirus user interface.

To configure exclusions for Realtime Protection from the Symantec System Center

  1. In the Symantec System Center, unlock the server group.
  2. Right-click the Domino server, and then click All Tasks > Symantec AntiVirus > Server Realtime Protection Options.
  3. Click Exclusions.
  4. Click the Check file for exclusion before scanning box.
  5. Click Files/Folders to create the exclusions.
  6. Exclude the temporary folder that you created.
  7. Exclude the temporary folder that Domino uses.
    The folder path varies between servers but uses the following name convention:
    <drive>:\<temp>\notesxxxxx

    Where <drive> is the drive letter and <temp> is the temporary folder for your operating system. For example, C:\Windows\Temp\notes6030C8


To configure exclusions for a scheduled scan from the Symantec System Center

  1. In the Symantec System Center, unlock the server group.
  2. Right-click the server group, and click All Tasks > Symantec AntiVirus > Scheduled Scans.
  3. Create a scheduled scan, or edit an existing one.
  4. Click Scan Settings.
  5. Click Options.
  6. Check Exclude files and folders, and then click Exclusions.
  7. Check Check file for exclusion before scanning
  8. Click Files/Folders to create the exclusions.
  9. Exclude the temporary folder that you created.
  10. Exclude the temporary folder that Domino uses.
    The folder path varies between servers but uses the following name convention:
    <drive>:\<temp>\notesxxxxx

    Where <drive> is the drive letter and <temp> is the temporary folder for your operating system. For example, C:\Windows\Temp\notes6030C8


To start a manual scan with the appropriate exclusions from within Symantec AntiVirus

  1. In the Symantec AntiVirus window, in the left pane, under Scan, click Scan Computer.
  2. Click the Options button in the lower-right corner.
  3. Check Exclude selected files and folders.
  4. Click Exclusions.
  5. Check Check file for exclusion before scanning
  6. Click Files/Folders to create the exclusions.
  7. Exclude the temporary folder that you created.
  8. Exclude the temporary folder that Domino uses.
    The folder path varies between servers but uses the following name convention:
    <drive>:\<temp>\notesxxxxx

    Where <drive> is the drive letter and <temp> is the temporary folder for your operating system. For example, C:\Windows\Temp\notes6030C8


 


Notes:

  • Symantec recommends that you also exclude files with .nsf extensions from real-time protection, manual scans, and scheduled scans.
  • To ensure that any exclusions that you set at the server group level and the client group level distribute correctly to managed clients, use build 8.01.440 (MR4), 8.1.1.314a (MR1), or a later release.
  • Symantec recommends that you configure Domino servers as managed clients. Add those clients to a unique client group, as described in the "Managed Clients" section of this page.
  • On partitioned Domino servers, you must create separate exclusions for each partition. Create subfolders for each partition under the SAVTEMP folder.
  • If you use Premium AntiSpam, the product creates temporary files in C:\Inetpub. Symantec suggests that you create exclusions for the C:\Inetpub folder.


References
For additional information please see Email deleted from the savquar.nsf or savlog.nsf by is quarantined by a Symantec AntiVirus Corporate Edition client.



 




Legacy ID



2002051710331354


Article URL http://www.symantec.com/docs/TECH79960


Terms of use for this information are found in Legal Notices