Hi guys,
having a (performance) problem with an application. I built a new policy / enhanced the Base Policy and added some (file and process) exceptions. How can I check on one particular client if these exceptions are working as they should?
Using Intercept X Advanced on the Windows 10 endpoints.
Thanks in advance.
One way you can verify if your exclusions are working correctly is by using an EICAR test file. Further information can be found in the following article.
- Sophos Endpoint: Test detection features
If you have a folder exclusion, placing the eicar file within the excluded directory will work to test this in real-time. For process exclusions you may want to get a baseline for speed first without the exclusion present and then test after the exclusion is added.
One way you can verify if your exclusions are working correctly is by using an EICAR test file. Further information can be found in the following article.
- Sophos Endpoint: Test detection features
If you have a folder exclusion, placing the eicar file within the excluded directory will work to test this in real-time. For process exclusions you may want to get a baseline for speed first without the exclusion present and then test after the exclusion is added.
