Video Screencast Help
Protect Your POS Environment Against Retail Data Breaches. Learn More.

SEP 12.1 Excluding Specific Drives from scanning

Created: 15 Jan 2014 • Updated: 15 Jan 2014 | 14 comments
Ch@gGynelL_12's picture

Hi All,

 

Is there a way to exclude the other drives like E:\, F:\, etc. from scanning with SEP? Is there a policy or configuration in SEPM to configure scanning with exclusions of these drives??

 

Thank you in advance..

 

Regards,

JM

Operating Systems:

Comments 14 CommentsJump to latest comment

.Brian's picture

In the exception policy just add E:\ or F:\ or whichever drive letter you want to exclude

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Ch@gGynelL_12's picture

Thank you for your quick response..

 

Is it working if I just only add this variable, (E:\, F:\,, etc..)..

 

regards,

JM

pete_4u2002's picture

this can be created only in custom scan i.e. scheduled scan on client.

check this link

 

Creating exceptions for Symantec Endpoint Protection

Article:HOWTO80919  |  Created: 2012-10-24  |  Updated: 2013-10-07  |  Article URL http://www.symantec.com/docs/HOWTO80919

 

Ch@gGynelL_12's picture

thank you for your response..

 

Is there other way to exclude these drives in SEPM console. We want to apply this scanning policy to all of our servers, and it is hard to run a scan on these servers everyday manually, just to exclude drives from scanning..

 

Any other idea in excluding these drives?

 

thank you.

 

 

pete_4u2002's picture

i would suggest exclude all the root folders drives under that drive in SEPM policy exception.

Ch@gGynelL_12's picture

Do you mean that, all root folders from these drives will be exclded if configured?

 

Like these?

in exclusion policy> E:\Folders or F:\Folders

 

Is this working?

 

Thank you..

Regards,

JM

.Brian's picture

If you set an exclusion for E:\ than yes everything under will be excluded as well, the entire drive...

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

pete_4u2002's picture

if you exclude f:\test\, then all the files and folders within test will be excluded. you can test to verify it.check the field includ subfolders

Folder

Type the full path name if the selected prefix variable is [NONE]. If you selected a prefix variable, the path should be relative to the selected prefix.

Include subfolders

Check to include all the subdirectories of the specified folder.

 

Ch@gGynelL_12's picture

how about brian's response?? adding only the E:\ then the entire folders, files or data will be excluded, is that working also or much better if I add the root folder like E:\Root Folder\..

 

Thank you.

 

Regards,

JM

.Brian's picture

If you want everything on E:\ excluded than check the box to include subfoldersCapture_5.JPG

 

Otherwise, only data root of E: would be exlcuded but not subfolders

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Rafeeq's picture

Excluding entire drive is more vulnerable , as a security practice exclude only specific folders

technical_specialist's picture

If you can add E:\ then entire drive (included all folder of E drive) will be add in exception of scanning where you can apply these policy.

If you required to exception of E:\ and F:\ of all Server systems then you can apply the policy only on Server groups

technical_specialist's picture

Thanks Brian for share the snapshot to clear it. I also not checked this option before that.

Thanks.

Ch@gGynelL_12 now you clear the brian point? if your confusion clear then please mark solution.