After you install DLP Endpoint, if the scanning significantly affects your system performance, you might need to exclude DLP Endpoint content from scans. This article contains a list of DLP Endpoint processes and folders that can be excluded from the ENS scan or VSE scanning engine.

DLP Endpoint processes to exclude:
Create an on-access scanner low-risk process exclusion for the following DLP Endpoint processes. Disable scanning when writing to or reading from disk.

C:\Program Files\McAfee\DLP\Agent

DLP Endpoint folder to exclude:
Create an exclusion for the following DLP Endpoint folder:
 

C:\ProgramData\McAfee\DLP\
 

DLP Endpoint for Mac folders to exclude:
Create an exclusion for the following DLP Endpoint for Mac folders:
 

How to configure exclusions in ENS and VSE:
When you configure exclusions, always apply the principle that the more precise the exclusion, the smaller the potential security risk. For instructions to configure exclusions, see the following documentation:

• ENS: "Preventing Threat Prevention from blocking trusted programs, networks, and services" section of the Endpoint Security Threat Prevention Product Guide
• VSE:
  • KB66909 - Endpoint Security/VirusScan Enterprise exclusion articles
  • KB55898 - VirusScan Enterprise Exclusions Explained
  • KB67544 - How to create low-risk and high-risk process exclusions for VirusScan Enterprise 8.x in ePolicy Orchestrator
  • KB50998 - How to manage file and folder exclusions using wildcards
  • KB61000 - Path of a scan item reported by its physical address instead of logical address