Loading...

Knowledge Center


Exclusions with Application and Change Control to improve post-install performance
Technical Articles ID:   KB88915
Last Modified:  8/28/2019
Rated:


Environment

McAfee Application and Change Control (MACC) 8.x.x, 7.x.x, 6.x.x
McAfee Endpoint Security (ENS) Threat Prevention 10.x.x
McAfee VirusScan Enterprise (VSE) 8.x.x

Summary

After MACC installation, system performance can be significantly impacted by scanning and requires the creation of exclusions for MACC processes or folders. This article contains information about excluding MACC processes and folders from scans by the ENS or VSE scanning engine.

  • Create an on-access scanner low-risk process exclusion (Disable scanning when writing to or reading from disk) for the MACC process Scsrvc.exe
NOTE: The default location for this process is C:\Program Files\McAfee\Solidcore
  • Create an exclusion for the MACC folder <drive>\Solidcore\

When configuring exclusions in ENS or VSE, always apply the principle that the more precise the exclusion, the smaller the potential security risk. For instructions to configure exclusions, see the following documentation:

  • ENS: "Configuring exclusions" section of the Endpoint Security 10.5 Product Guide (PD26799)
  • VSE:
    • KB66909 - Consolidated list of Endpoint Security and VirusScan Enterprise exclusion articles
    • KB55898 - Understanding VirusScan Enterprise Exclusions
    • KB67544 - How to create low-risk and high-risk process exclusions for VirusScan Enterprise 8.x in ePolicy Orchestrator
    • KB50998 - How to manage file and folder exclusions in VirusScan Enterprise 8.x using wildcards
    • KB61000 - VirusScan Enterprise exclusions and hardware paths (physical address versus logical address)

NOTE: If using a third-party antivirus or endpoint protection software, the same exclusions should be used in the third-party program.

Rate this document

Glossary of Technical Terms


 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.