How to create Low-Risk and High-Risk process exclusions in VirusScan Enterprise
Technical Articles ID: KB58692
Last Modified: 08/21/2012
Rated:
Last Modified: 08/21/2012
Rated:
Environment
Problem
How do I exclude from scanning file operations that are initiated by specific processes?
Cause
The VirusScan Enterprise (VSE) On-Access Scanner scans every file when it is accessed. Because some applications constantly access a high number of files, it can be necessary to set exclusions to improve the performance of these applications. This does not have to lower the security of your system; VSE allows you to set very specific exclusions. Because many applications such as database programs write to files in multiple locations, it is generally best to exclude files and folders based on a specific process instead of excluding them for all processes.
Solution 1
VirusScan Enterprise 8.5i and later (unmanaged / standalone installations)
Exclusions can be set locally (if the software is installed as a standalone) or through the appropriate management program (ePO).
Exclusions can be set locally (if the software is installed as a standalone) or through the appropriate management program (ePO).
- Click Start, Programs, McAfee, VirusScan Console.
- Right-click On-Access Scanner and select Properties.
- Select All Processes, then enable the appropriate option:
Configure different scanning policies for high-risk, low-risk and default processes for VSE 8.7i and later Use different settings for high-risk and low-risk processes for VSE 8.5i
NOTE: If All Processes is not available, this option has already been enabled.
- Select Low-Risk Processes.
- On the Processes tab, click Add and use the list or browse to the application you wish to include as a Low-Risk Process.
- In the Detection tab, deselect any or all of the options in the Scan Files section.
NOTE: It is generally sufficient to disable When reading from disk. However, database servers also perform many write operations. In some environments you may need to disable the option When writing to disk also.
- Select High-Risk Processes.
- On the Processes tab, click Add and use the list or browse to the application you wish to include as a High-Risk Process.
NOTE: Ensure you add any exclusions previously created in the Default processes to the High-Risk Processes. If you have high-risk and low-risk enabled, any exclusions previously stored in Default processes will not be applied to the high-risk processes policy.
Related Information
Previous Document ID
KB47617
