Endpoint Protection

 View Only
  • 1.  Excluding a drive

    Posted May 24, 2017 04:02 PM

    For servers which have multiple local drives...is it possible to create an exception to tell SEP to only protect the C: drive and leave alone other local drives such as an F: and R: drive? 

    I assume this would be done directly from the SEP client rather than the SEPM console?



  • 2.  RE: Excluding a drive
    Best Answer

    Posted May 24, 2017 04:07 PM

    You can do it from either SEPM or the SEP client (if you have the ability to)

    If you're on SEP 14 MP1, there is a known bug, read about it here:

    http://www.symantec.com/docs/TECH239782



  • 3.  RE: Excluding a drive
    Best Answer

    Posted May 24, 2017 04:09 PM
    You can do this from both sep and sepm using folder exception option


  • 4.  RE: Excluding a drive

    Posted May 24, 2017 04:28 PM

    Thanks!

    I created User-defined exception on the client by simply selecting the drives, which appear under the Exception Item column as:

    D:\*

    F:\*

    R:\*

    Will this be an issue? We are running v14 MP1



  • 5.  RE: Excluding a drive

    Posted May 24, 2017 04:30 PM

    per the KB article, it looks to occur only if a prefix is there. Since you created it on the client I don't believe it will be affected.



  • 6.  RE: Excluding a drive

    Posted May 24, 2017 04:36 PM

    Thank you sir.



  • 7.  RE: Excluding a drive

    Posted May 24, 2017 04:40 PM

    You're welcome.



  • 8.  RE: Excluding a drive

    Posted May 25, 2017 04:57 AM

    Hi tech43,

    Be warned: this is opening enormous holes in your defenses.  Exceptions should be applied with as much precision as possible, not configured to ignore entire drives.

    Some aditional advice:

    Exceptions, Illustrated: Part One

    https://www.symantec.com/connect/articles/exceptions-illustrated-part-one

     

    Exceptions, Illustrated: Part Two

    https://www.symantec.com/connect/articles/exceptions-illustrated-part-two