Endpoint Protection

 View Only
  • 1.  SEP exclude iSCSI storage

    Posted Jul 26, 2012 10:01 AM

    Hi at all

    On one Windows server 2008 R2 (Backup- Server) we have different iSCSI LUNs attached which as well are listed under "Storage Management". These drives do not have any drive letters assigned. How can I exclude these drives that they are NOT scanned by Symantec Endpoint Protection? They are used by the ESX Farm for the VMs. The Server has attached them to run Backups.

    Thanks for your help.



  • 2.  RE: SEP exclude iSCSI storage

    Posted Jul 27, 2012 03:05 AM

     

    The DevViewer Tool can be used to view the devices on a client computer and obtain the class IDs or device IDs. It is necessary to know the class or device ID when creating or editing Application and Device Control Policies.  The device ID can also be obtained from the Windows Control Panel.
     
    For more information, please refer to this document: http://www.symantec.com/docs/TECH175220


  • 3.  RE: SEP exclude iSCSI storage

    Posted Jul 27, 2012 09:01 AM

    Hi Ajit Jha

    Thanks for your help. But I'm asking for SCAN exceptions... do you know how I can exclude it from the AV scan?



  • 4.  RE: SEP exclude iSCSI storage
    Best Answer

    Posted Jul 27, 2012 10:51 AM

    Hi!

    Are you sure that this drive is scanned? As i know if it doesn't have a drive letter it is out of range from the view of the scan.



  • 5.  RE: SEP exclude iSCSI storage

    Posted Jul 27, 2012 02:41 PM

    Get the help of below link for centralized exception
    https://www-secure.symantec.com/connect/forums/centralize-exception-policy

    Creating Centralized Exceptions Policies in the Symantec Endpoint Protection Manager
     http://www.symantec.com/business/support/index?page=content&id=TECH104326

    After creating the policy you can verify it for using the below link
    http://www.symantec.com/business/support/index?page=content&id=TECH105814

    Entry of that extension will display in below registry path
    HKEY_LOCAL_MACHINE\SOFTWARE\SYMANTEC\SYMANTEC ENDPOINT PROTECTION\AV\EXCLUSIONS
    Note: On 64bit window machines the registry path is:
    HKEY_LOCAL_MACHINE\Software\WOW6432Node\Symantec\Symantec Endpoint Protection\AV\Exclusions



  • 6.  RE: SEP exclude iSCSI storage

    Posted Jul 30, 2012 10:19 AM

    Hi gsp_sepm

     

    Thanks .... I know the basics about centralized exceptions. The question is about local attached iSCSI LUN without drive letter.... this is not outlined in any standard documentation... have you maybe any Idea where I can found this information

    Unfortunately your third link "TECH105814" does not work. DO you know the name of the article, so I can found it over google.... THanks for your help



  • 7.  RE: SEP exclude iSCSI storage

    Posted Jul 30, 2012 10:25 AM

    Hi guwy :-)

    Really? This would give us the answer completely...



  • 8.  RE: SEP exclude iSCSI storage

    Posted Jul 30, 2012 03:20 PM

    From what I've seen, if there is no drive letter, than there won't be a scan.