cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
Level 7
Report Inappropriate Content
Message 1 of 6

Exclude directories/sub-directories from on-access scanning

Jump to solution

Greetings,

We are running ePolicy Orchestrator 4.0 and are trying to exclude dirs/sub-dirs from on-access scanning. In Systems, I go to Policies => Product:VirusScan Enterprise 8.5.0. I looked in on-access default processes policies and on-access general policies and I do see the option for 'Exclusions', but it only gives the option to exclude by file type, age, pattern...

Is there another place I should be looking?

Thanks,

C

1 Solution

Accepted Solutions

Re: Exclude directories/sub-directories from on-access scanning

Jump to solution

Hello Jalg56,

Afaik, the %UserProfile% variable cannot be used as an exclusion for the logged on user. This environment variable is set for the User, and OAS runs under the LocalSystem account and can only see the system environment variables.

I'd create an exclusion like below according to your example:

**\Alt-N\Outlook Connector 2.0\Accounts\Outlook*\

Hope this helps.


Regards,
Bruno

View solution in original post

5 Replies
Highlighted
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 2 of 6

Re: Exclude directories/sub-directories from on-access scanning

Jump to solution

Put the folders in the pattern area.

Info below on using wildcards

HTH

Corporate KnowledgeBase

How to use wildcards with exclusions in McAfee VirusScan Enterprise 8.x


 
   
   
   
 



  
   
   
   
 
   

 
 
Corporate KnowledgeBase ID:  KB54812
Published:  July 22, 2008
 

Environment


     


McAfee VirusScan Enterprise (All supported versions)

Summary


     


How to use wildcards when creating exclusions with McAfee VirusScan Enterprise.
 

       
     
     
     
     
     
            
     
     
     
     
     
          
               
                    
                    
                                   
                    
                    
                    
                    
               
          
     
     

     

       
     
     
     
     
     
            
     
            
     
     
     
     
     
          
               
                    
                    
                                   
                    

Solution  1


     



            How to use wildcards when creating exclusions with McAfee VirusScan Enterprise
       


       
When excluding all files of a particular extension, use the option to exclude files by Type and specify the desired extension.

                    
                    
                    
               
          
     
          
               
                    
                    
                                   
                    

Solution  2


     


Wildcards (**,*, ?) are helpful in creating exclusions for VirusScan
Enterprise (VSE), but certain rules apply (see examples below):


       

  •                
    Exclude the Favorites folder for all users:

                       

                       
                            C:\Documents and Settings\*\Favorites\

                               

                           

                       

                   

               

  •                
    Exclude any folder named Favorites on drive C:

                       

                       
                            C:\**\Favorites\

                               

                           

                       

                   

               

  •                

    Exclude the Temp folder in any location, on any drive.


                   


                        **\Temp\**
                   


                   

    In this example the following directories would be excluded:


                   

                       

    C:\temp
                       


                       

    D:\windows\temp
                       


                       

    c:\documents and settings\Administrator\Local Settings\temp
                       


                   

               

  •                
    Exclude any file with a .tmp extension in a folder named Temp anywhere on the system:

                       

                       
                            **\Temp\*.tmp

                               

                           

                       

                   

               

  •                
    Exclude any file with a .html extension anywhere on the system:

                       

                       
                            **\*.html

                               

                           

                       

                   

               

  •                
    Exclude all files named inifileX (where X is any valid character for a filename) within any folder name beginning with Temp under C:\Windows:

                       

                       
                            C:\Windows\Temp*\inifile?.*\

                               

                           

                       

                   

               

  •                
    Exclude all files with the tmp extension (*.tmp) in any folder on a specific drive:

                       

                        <drive:>\**\*.tmp

                       

                       

                   

                   
    In this example any *.tmp files on the D: drive will be excluded:

               

       

           

               

                   

                        D:\**\*.tmp
                       

                       

                       

                   

               

           

       

       


           
                IMPORTANT:
           
Do not select Include Subfolders when excluding a file, as this will produce incorrect results.


       
For additional information and examples, review the VirusScan Enterprise 8.x Product Guide.

                    
                    
                    
               
          
     
     

     

       
     
     
     
     
     
            
     
     
     
     
     
          
               
                    
                    
                                   
                    
                    
                    
                    
               
          
     
     

     
Highlighted
Level 7
Report Inappropriate Content
Message 3 of 6

Re: Exclude directories/sub-directories from on-access scanning

Jump to solution

Tried to exclude extensions in a folder and subfolder.

    c:\Program files\Test Application\*.tst - Including subfolders ticked.

The c:\Program files\Test Application\test folder\test1.tst was scanned.

Have now created both the below to eliviate to problem.

   c:\Program files\Test Application\*.tst - Including subfolders ticked.

     c:\Program files\Test Application\**\*.tst

Will see if it works.

Highlighted
Level 7
Report Inappropriate Content
Message 4 of 6

Re: Exclude directories/sub-directories from on-access scanning

Jump to solution

Good morning,

We're running ePo 4.5 (VirusScan 8.7)

Just a question about exclusion elements, i would like to exclude a specific directory using system variable such as:

%userprofile%\Application Data\Alt-N\Outlook Connector 2.0\Accounts\Outlook  (for xp users)

and

%userprofile%\appData\Roaming\Alt-N\Outlook Connector 2.0\Accounts\OutlookConnector (for vista users)

Is it possible ??

Thanks a lot

Jalg56

Re: Exclude directories/sub-directories from on-access scanning

Jump to solution

Hello Jalg56,

Afaik, the %UserProfile% variable cannot be used as an exclusion for the logged on user. This environment variable is set for the User, and OAS runs under the LocalSystem account and can only see the system environment variables.

I'd create an exclusion like below according to your example:

**\Alt-N\Outlook Connector 2.0\Accounts\Outlook*\

Hope this helps.


Regards,
Bruno

View solution in original post

Highlighted

Re: Exclude directories/sub-directories from on-access scanning

Jump to solution

But are system variable works ? the %windir% ? %systemroot% ? Those two are specify in exclusion for server a lot, so it would be nice to be supported.

thanks...

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community