Endpoint Protection

 View Only
  • 1.  AV exceptions in Local Settings

    Posted Oct 05, 2009 08:16 AM
    Hello friends, can any one tell me how to add a folder in exceptions policy in Local Settings of users

    example the bello folder from the user's

    c:/Documents and Settings/290982/Application Data/IMP
    c:/Documents and Settings/290985/Application Data/IMP
    c:/Documents and Settings/320452/Application Data/IMP

    i want to exclude the IMP folders from all the users from my Org. there are 6000 user's in my org.



  • 2.  RE: AV exceptions in Local Settings

    Posted Oct 05, 2009 08:48 AM
    User centralized exception and under security risks exception select folder , select none and
    exclude
    %Appdata%\IMP  folder
    this should work fine.
    more on centralized exception here.

    http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/f7602d481cc0cb8e882574020062b021?OpenDocument&ExpandSection=2


  • 3.  RE: AV exceptions in Local Settings

    Posted Oct 05, 2009 10:14 AM
    hello,
    does this work for Different user's??????????


  • 4.  RE: AV exceptions in Local Settings

    Posted Oct 05, 2009 10:19 AM
    Yes it would work,

    Here we are excluding a folder under

    C:\Documents and Settings\rafeeqm\Application Data

    so if you go to start - run - %userprofie%
    it would be currently logged in user, so every profie would have an app data folder
    so we are excluding that folder, irrespective of users..



  • 5.  RE: AV exceptions in Local Settings

    Posted Oct 06, 2009 07:43 AM
    i added %Appdata%\IMP  folder in centralized exceptions list but AV is still it scanning this folder.


  • 6.  RE: AV exceptions in Local Settings

    Posted Oct 06, 2009 08:03 AM
    When ever you create a centralized exception.
    AV will scan the folder but no actions will be taken on it..same as not scanning..



  • 7.  RE: AV exceptions in Local Settings
    Best Answer

    Posted Oct 07, 2009 07:56 AM
    Hi Rafeeq,
    it will not work,
    i opened a case with symantec technical support they also say the same thing,
    go through bellow mail got it from symantec,

    Since the exclusion path is under the user profile, we do not have much option with adding only with the "Alluser" under C:\Documents and Settings\All Users\Application Data. The exclusion has to be made for each user account which looks very lenght job.
     
     
    Also since you have tried with adding the %Applicaiton% and found not positive result, We have left with only the option of adding each user in the exception list.


    SV


  • 8.  RE: AV exceptions in Local Settings

    Posted Feb 08, 2010 03:56 PM
    Could you add the exception as follows and have SEP ignore IMP wherever its encountered?

    sepexclusion.jpg