Endpoint Protection

 View Only
  • 1.  Endpoint protection and standard exceptions

    Posted Apr 11, 2012 10:25 AM

    Endpoint automatically creates a exclusion group for exchange server if it identifies Exchange is installed

    In looking at documentation on the site it does not give detail as far as what is in the exclusions

    Is there a detailed symantec document that has all the exclusions that are applied if it recognizes Exchange 2010 is installed?

     

    Also Is there a document that has the files that Symantec will exclude by default as far as OS , namely if pagefile.sys is excluded.?



  • 2.  RE: Endpoint protection and standard exceptions

    Trusted Advisor
    Posted Apr 11, 2012 10:31 AM

    Hello,

    The Symantec Endpoint Protection client software creates file and folder scan exclusions for the following Microsoft Exchange server versions:

    • Exchange 5.5
    • Exchange 2000
    • Exchange 2003
    • Exchange 2007
    • Exchange 2010

     

    About the automatic exclusion of files and folders for Microsoft Exchange server and Symantec products

    http://www.symantec.com/docs/TECH102400

    Preventing Symantec Endpoint Protection 11.0 from scanning the Microsoft Exchange 2010 directory structure

    http://www.symantec.com/business/support/index?page=content&id=TECH97707&locale=en_US

    About the files and folders that Symantec Endpoint Protection excludes from virus and spyware scans

    http://www.symantec.com/docs/HOWTO55233

    and check this Article:

    http://bit.ly/IFPKEi

    Hope that helps!!



  • 3.  RE: Endpoint protection and standard exceptions

    Posted Apr 11, 2012 10:48 AM

    Mithun,

     

    I have all of that info

    I am looking to see if there is a more detailed document to show exactly what is excluded

    Is it in line with the technet article?

    http://technet.microsoft.com/en-us/library/bb332342.aspx

     



  • 4.  RE: Endpoint protection and standard exceptions

    Trusted Advisor
    Posted Apr 11, 2012 10:54 AM

    Hello,

    Check this Article:

    How to Verify if an Endpoint Client has Automatically Excluded an Application or Directory

    http://www.symantec.com/docs/TECH105814

    Note: To see the exclusions that the client creates, you can examine the contents of the HKEY_LOCAL_MACHINE\Software\Symantec\Symantec Endpoint Protection\AV\Exclusions registry. You must not edit this registry directly. You can configure any additional exclusions by using centralized exceptions.

    On a 64 bit server using Exchange 2007 or 2010, the path in the registry to confirm auto exclusions is slightly different. The path includes the WOW6432node key.
    HKLM\Software\WOW6432node\Symantec\Symantec Endpoint Protection\AV\Exclusions\.

    The client does not exclude the system temporary folders from scans because doing so can create a significant security vulnerability on a computer.

    Hope that helps!!



  • 5.  RE: Endpoint protection and standard exceptions

    Posted Apr 11, 2012 11:04 AM

    Hello,

    There is no detailed Article by Symantec.

    However, you can check personally under registry as mithun suggested.



  • 6.  RE: Endpoint protection and standard exceptions

    Posted Apr 11, 2012 11:06 AM

    I have looked at that as well

    Once in the registry there is a additional key created for Exchange server what has several folders created as exclusions, what I am trying to find is exactly what Symantec is excluding Processes, file extensions, etc, so that I can see what is excluded and what I need to create in the centralized exception policy.

     



  • 7.  RE: Endpoint protection and standard exceptions

    Posted Apr 11, 2012 11:15 AM

    I agree

    No detailed article.

    We have Installed SEP on the Exchange server and we are not facing any challenge.

    In a clustered environment, you must make additional exclusions manually.

    Preventing Symantec Endpoint Protection from scanning the Microsoft Exchange 2007 directory structure

    http://www.symantec.com/docs/TECH102249

    I would suggest you to install a dedicated mail security product, such as Symantec Mail Security for Microsoft Exchange.