Endpoint Protection

 View Only
  • 1.  I have a policy for the centralized exception from the real time scan.

    Posted Sep 09, 2009 02:53 PM
    I have this defined on the SEPM server and I have applied the policy to all groups, the clients and servers get the policy from the top level of the group. The servers and the clients are actively connected and I did click on "update policy" but I still do not see the centralized exceptions on the client that was already defined on the SEPM.
    What can I check. I want to be certain that all clients adhere to this policy.
    Thank you



  • 2.  RE: I have a policy for the centralized exception from the real time scan.

    Posted Sep 09, 2009 02:57 PM
    ClientCE.jpg


  • 3.  RE: I have a policy for the centralized exception from the real time scan.

    Posted Sep 09, 2009 02:58 PM
    ServerCE.jpg


  • 4.  RE: I have a policy for the centralized exception from the real time scan.



  • 5.  RE: I have a policy for the centralized exception from the real time scan.

    Posted Sep 09, 2009 03:31 PM
    I still can not see pre defined server centralized exceptions even in the registry. The policy and communications are in place.


  • 6.  RE: I have a policy for the centralized exception from the real time scan.

    Posted Sep 09, 2009 03:40 PM
     HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\AV\Exclusions\ScanningEngines\Directory\Admin

    Do you see any folders below Admin it should have a numbered folder which should contain C:\Intetpub, C:\ExchSrv and C:\program files\Veritas.

    If not then try updating the policy or rebooting the client just in case the infor is not reflecting in registry.


  • 7.  RE: I have a policy for the centralized exception from the real time scan.

    Posted Sep 09, 2009 03:48 PM
    How can I verify the file extension exclusions???


  • 8.  RE: I have a policy for the centralized exception from the real time scan.
    Best Answer

    Posted Sep 09, 2009 05:18 PM
     HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\AV\Exclusions\ScanningEngines\Extensions\Admin\Extensions


  • 9.  RE: I have a policy for the centralized exception from the real time scan.

    Posted Sep 09, 2009 05:20 PM
    I think from MR3 onwards the Centralised excpetion made by the Admin is not visible on the client side because of Security reasons.

    You can see the file extensions under HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\AV\Exclusions\ScanningEngines\Directory\Admin

    As you are already seeing it that menas the Excpetion that you have made have been successfully applied to the client side.:)


  • 10.  RE: I have a policy for the centralized exception from the real time scan.

    Posted Sep 09, 2009 10:26 PM
    I think Kavin is correct. I know for a fact that my centralized exceptions don't show on the client. but I know what I excluded is actually being excluded on the client.