Endpoint Protection

Hello,

what exactly does Creating exceptions for TruScan Proactive Threat Scans mean? Is the process ignored if SEP identify it as a threat? Or are all activies by this process are ignored?

What I want to achieve: if I understood it correctly, every file on our fileserver will be scanned if the backup tool access it for backup. I want to configure SEP to ignore these file access.

Is the TrueScan Proactive Threat Exception the right way?

Kind regards,
Dennis

PTP is a heuristic based detection where it does behaviour analysis on the file. So this particular file would be excluded from PTP.

Here's what you can do.

Go into your AV policy.

Auto-Protect >> Advanced Scanning and Monitoring >> uncheck Scan when a file is backed up

Hello,

Disabling the "Scan when a file is backed up" would not scans the files when they are accessed during a backup operation.

Use this option if you did not run a virus check on the files that you want to back up.

Do not enable this option if you want to bypass Auto-Protect for the files that the client backs up. By using this option, you can significantly slow backup operations, because Auto-Protect scans each file that is included in the backup.

The setting applies only to files that are backed up. The client scans the files that it restores from a backup regardless of this setting.

You can lock or unlock this option to prevent or allow user changes.

Reference: https://www-secure.symantec.com/connect/forums/scan-when-file-backed

Hi,

Thank you for posting in Symantec community.

I would be glad to answer your question.

In the SEPM Antivirus & Antispyware policy you can uncheck this option. By default this option is selected.

By doing uncheck this option you should achieve what you want.

Screenshot is attached to the reference.

This option is disabled.

But how can SEP differ between "normal files access" and "backup file access"? IMO for the filesystem (and filter drivers) it's only a simple read?

Hi,

You should see performance improvement when the backup file access is unchecked.

Hi

Please refer the link below

http://www.symantec.com/business/support/index?page=content&id=HOWTO27055&actp=search&viewlocale=en_US&searchid=1373370047767

Regards

Do you still require assistance? Please update the forum if you do or mark the thread that helped as "Solved" so it can benefit future users with the same question.

Thanks,
Brian