cancel
Showing results for 
Search instead for 
Did you mean: 

Exclude Policy

Hello,

We using McAfee Orchestrator 5.1.1, and we have exchange server 2013 but the memory utilization is high all the time ( 85-90 % ), i did create policy to exclude exchange ( low risk processes policies ) and excluded all exchange extensions on this article https://kc.mcafee.com/corporate/index?page=content&id=KB51471    then assigned it to exchange server and update the policy, but nothing change. 

Is there is any more steps i need to configure.

Best Regards,

2 Replies
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 3

Re: Exclude Policy

The Low Risk "pool" policy has read and write set to enable by default. The "Low Risk" policy implies you will "trust" those entries specifically should the scanner attempt to access. With that said, you would normally uncheck those two entries (read and write). Make sure that your organization is willing to assume the risk for excluding any item under the low risk pool, with these two items unchecked. The Microsoft article also mentions this. Excluding the Exchange entries will allow the Exchange application to run more efficiently since VirusScan will look at files that are changing and attempt to protect you.

Watch the video TU30285 located on McAfee KnowledgeBase - Understanding High-Risk, Low-Risk, and Default processes configuration and us....

Hopefully this helps.

Jay

Re: Exclude Policy

I'll also add that a high memory utilization condition doesn't sound like the fault of misconfigured exclusions.  I've seen issues with program crashes or high CPU utilization, but not memory.  Not that it couldn't be, but it wouldn't be my first inclination.