cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Exclusion List for 3rd Party AntiVirus Products

Jump to solution

Hi All,

Is there a list available that shows you what processes or files or folders that 3rd party vendors should be excluding or whitelisting or McAfee products (McAfee Agent, VSE 8.8.0.1804 and ENS / Threat Prevention)? For example McShield.exe you wouldnt want a 3rd party company to scan that file.

Regards

1 Solution

Accepted Solutions
Former Member
Not applicable
Report Inappropriate Content
Message 4 of 9

Re: Exclusion List for 3rd Party AntiVirus Products

Jump to solution

A similar list for ENS would be: https://kc.mcafee.com/corporate/index?page=content&id=KB87791

Sorry, but we can't confirm that it is ok to exclude these processes as we do not recommend it.

 

 

View solution in original post

8 Replies
Former Member
Not applicable
Report Inappropriate Content
Message 2 of 9

Re: Exclusion List for 3rd Party AntiVirus Products

Jump to solution

We don't have such a list as we don't recommended having multiple AV scanners installed on systems.

Having multiple AVs can cause a number of various issues such as installation and performance issues, dll injections, etc.

Re: Exclusion List for 3rd Party AntiVirus Products

Jump to solution

Thanks Chealey,

The below list shows processes that McAfee Agent and VSE use. I presume you could use this as a reference point for 3rd party vendors to whitelist if required?

https://kc.mcafee.com/corporate/index?page=content&id=KB65784

Is there a similar list for ENS?

Regards,

Former Member
Not applicable
Report Inappropriate Content
Message 4 of 9

Re: Exclusion List for 3rd Party AntiVirus Products

Jump to solution

A similar list for ENS would be: https://kc.mcafee.com/corporate/index?page=content&id=KB87791

Sorry, but we can't confirm that it is ok to exclude these processes as we do not recommend it.

 

 

View solution in original post

Re: Exclusion List for 3rd Party AntiVirus Products

Jump to solution

Thanks Chealey

kylekat
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 6 of 9

Re: Exclusion List for 3rd Party AntiVirus Products

Jump to solution

excellent topic and info, thanks!

bretzeli
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 7 of 9

Re: Exclusion List for 3rd Party AntiVirus Products

Jump to solution

As a reminder we would like to mention as example c:\KWORING Directory and several process which are EXCLUDED fully from KASEYA since years. The breach if fully executed would have killed 30% of IT Services company who use KASEYA.

Mostly the Exclusion because of the NINITE Products which they use often and have a hell of False on Virus total (Referenced by Mcafee GTI also).

 

 

 

denn
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 8 of 9

Re: Exclusion List for 3rd Party AntiVirus Products

Jump to solution

Maybe there is same KB for Linux ? We want to exclude 3rd party EDR from McAfee ENS on linux

AdithyanT
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 9 of 9

Re: Exclusion List for 3rd Party AntiVirus Products

Jump to solution

Hi @denn,

EDR uses TRACE and File Hashing features to monitor process and file activities. Trace is not available yet on Linux endpoints and hence, you can use the below document that explains about exclusion of files and folders from File Hashing on Linux.

https://docs.mcafee.com/bundle/mvision-endpoint-detection-and-response-product-guide/page/GUID-9FDCD...

Was my reply helpful?
If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

Thanks and regards,
Adithyan T
You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community