Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Adding numbered files to exceptions

Created: 28 Feb 2013 • Updated: 28 Feb 2013 | 5 comments
This issue has been solved. See solution.

I think I know the answer to this but thought I would ask anyway.

Is there anyway to add scanning exceptions of file created for a file that increases in number? As I know we can't use a wildcard on file names.

For example in the windows folder it creates a file ABC00001.ini every day the number increase so tomorrow ABC00002.ini is created and so on. an there is no way to exclude ABC*.ini.

Operating Systems:

Comments 5 CommentsJump to latest comment

Mithun Sanghavi's picture

Hello,

This could not be done.

It is not possible to use a wildcard the way you wish.

Exclusions and Wildcards - Symantec Endpoint Protection (SEP) Clients have them and the Symantec Endpoint Protection Manager (SEPM) does not.

http://www.symantec.com/docs/TECH169942

Configuring Exceptions for Symantec Endpoint Protection (SEP) 12.1

http://www.symantec.com/docs/TECH176906

You may wish to cast a vote in favor of this prosposed enhancement request:

https://www-secure.symantec.com/connect/idea/sepm-more-viarables-avas-exclusions

https://www-secure.symantec.com/connect/idea/wildcards-centralized-exceptions-endpoint-protection

Hope that helps!!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Ajit Jha's picture

Even i don't think this is possible.

Regard's

Ajit Jha

Technical Consultant

ASC & STS

Rafeeq's picture

It does not recognize any of the wildcards you add.

the only one accepted is ? for excluding extensions.

so Something.?xe will exclude AXE,BXE,CXE extensions or any single charector replaced by ?

 

SebastianZ's picture

As per documentation use of  * wildcards in centralized exceptions will not work:

Exclusions and Wildcards - Symantec Endpoint Protection (SEP) Clients have them and the Symantec Endpoint Protection Manager (SEPM) does not.

http://www.symantec.com/docs/TECH169942

 

Centralized Exceptions Policy - Symantec Endpoint Protection Manager -

* or Wildcards are not recognized in the policy and should not be used.

GeoGeo's picture

As I thought :(

Please review ideas and vote there could be something useful :)

https://www-secure.symantec.com/connect/security/ideas