Endpoint Protection

Hi,

It's been ages since I last needed to look at this. Microsoft have recommendations for exclusions for DFSR:

<drive>:\system volume information\DFSR\

$db_normal$
FileIDTable_2
SimilarityTable_2

<drive>:\system volume information\DFSR\database_<guid>\

$db_dirty$
Dfsr.db
Fsr.chk
> *.log <
> Fsr*.jrs <
Tmp.edb

<drive>:\system volume information\DFSR\config\

> *.xml <

<drive>:\<replicated folder>\dfsrprivate\staging\*

> *.frx <

These are mostly easy. What about the one inside > < brackets? Also what if the System Volume Information is on different drives between servers?

Thanks

You'll want to go through these:

https://www.symantec.com/docs/TECH106068

https://www.symantec.com/docs/TECH169942

Thanks for that.

I know about the predefined variables you can use, but what I basically need to do is:

anydriveletter\anypath\DfsrPrivate

If I have multiple servers with DFS-R, each with differing drive lettering and each with multiple DFS folders, having to do this would be silly:

exclude: D:\Folder1\DfsrPrivate
exclude: D:\Folder2\DfsrPrivate
exclude: D:\Folder3\DfsrPrivate

exclude: E:\Folder1\DfsrPrivate
exclude: E:\Folder2\DfsrPrivate
exclude: E:\Folder3\DfsrPrivate

Instead of *\DfsrPrivate\*

Is that not possible?

Thanks

Yea, it's not possible.

Where does one submit feature requests? 

A few AV competitors allow wildcarding drive letters for just this purpose.

Yeah, it's really poor!

Also, what about file exceptions. We have many instances of SQL Server (so sqlservr.exe). In the screenshot is what I do at the moment. If Reporting and Analysis servcies are used it could be 10 exceptions per instance!

Can I just specify sqlservr.exe once without a path to have it excluded whereever it is installed?

Full path is required.