2 Replies Latest reply on Sep 21, 2015 12:07 AM by tkinkead

    Exclude Policy

    hamouda

      Hello,

       

      We using McAfee Orchestrator 5.1.1, and we have exchange server 2013 but the memory utilization is high all the time ( 85-90 % ), i did create policy to exclude exchange ( low risk processes policies ) and excluded all exchange extensions on this article https://kc.mcafee.com/corporate/index?page=content&id=KB51471    then assigned it to exchange server and update the policy, but nothing change. 

       

      Is there is any more steps i need to configure.

       

      Best Regards,

        • 1. Re: Exclude Policy
          ja2013

          The Low Risk "pool" policy has read and write set to enable by default. The "Low Risk" policy implies you will "trust" those entries specifically should the scanner attempt to access. With that said, you would normally uncheck those two entries (read and write). Make sure that your organization is willing to assume the risk for excluding any item under the low risk pool, with these two items unchecked. The Microsoft article also mentions this. Excluding the Exchange entries will allow the Exchange application to run more efficiently since VirusScan will look at files that are changing and attempt to protect you.

           

          Watch the video TU30285 located on McAfee KnowledgeBase - Understanding High-Risk, Low-Risk, and Default processes configuration and usage.

           

          Hopefully this helps.

           

          Jay

          • 2. Re: Exclude Policy
            tkinkead

            I'll also add that a high memory utilization condition doesn't sound like the fault of misconfigured exclusions.  I've seen issues with program crashes or high CPU utilization, but not memory.  Not that it couldn't be, but it wouldn't be my first inclination.