Process Exceptions
Created: 13 Jul 2009 | 5 comments
Much like the competition does, it would be good to have Process Exceptions that would say SQLSERVER.EXE is safe, don't touch it or any of the files it touches.
Idea Filed Under:
Comments
This already exists
There is a Centralized Exceptions policy in the SEPM for exactly this purpose.
Not according to support...
Centralized Exceptions for processes are only for truscan, not AntiVirus, which will also glom onto any process and see what files it is touching.
partially correct
You can make single file exceptions for AntiVirus that stop the AntiVirus from scanning a specific file, but you must include the full path for that file (though you can use system variables).
The concept of trusting a
The concept of trusting a process and anything it touches rings true with McAfee customers. That functionality exists in such a fashion. Ignore the process and anything it touches is much needed.
Senior Consultant @ Creative Breakthroughs, Inc. a Symantec Platinum Partner
http://www.cbihome.com/
"and anything it touches"
"and anything it touches" leaves you very vulnerable to dll injection type attacks.
Would you like to reply?
Login or Register to post your comment.