This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Onaccess & Full Scan Exclusion List Query

Dear All

I am new to Sophos and am not sure how to resolve this issue so I decided to post to ask your expert opinion.

I have setup similar exclusion list for both onaccess and full scan exclusion.  Windows 2008 servers are fine but when I add Windows 2003 servers I receive "differs from policy" alert.  I enabled the verbose logging and found out that full scan exclusion list is not applying.  I removed the exclusion list from both onaccess and full scan.  I also deleted the schedule task.  I added first the exclusion list for onaccess and it applies fine than I added the same list to full scan exception and I got the alert.  I looked at the machine.xml file and it seems that the onaccess exception list applies first and full scan exception list second.  When it is trying to write the same exception for full scan, some how it does not agree.  If I do the reverse that is first apply exception list for full scan and than do the exception for onaccess, it works. 

Am I doing something wrong?  Is there limitation as to only one exception that is either onaccess or full scan be applied on window 2003 servers whereas Windows 2008 servers are fine?  What is the best practice to implement exclusion for onaccess and full scan? 

I look forward to your replies.

Many thanks in advance.   

:4281


This thread was automatically locked due to age.
Parents
  • "Am I doing something wrong?  Is there limitation as to only one exception that is either onaccess or full scan be applied on window 2003 servers whereas Windows 2008 servers are fine?  What is the best practice to implement exclusion for onaccess and full scan? "

    The on-access and full scan can have as many exclusions as are required.

    The policy from the Console is not getting to the machines as there are restrictions on the RMS system, please check other posts about basic RMS checks. (will edit later and link)

    :4295
Reply
  • "Am I doing something wrong?  Is there limitation as to only one exception that is either onaccess or full scan be applied on window 2003 servers whereas Windows 2008 servers are fine?  What is the best practice to implement exclusion for onaccess and full scan? "

    The on-access and full scan can have as many exclusions as are required.

    The policy from the Console is not getting to the machines as there are restrictions on the RMS system, please check other posts about basic RMS checks. (will edit later and link)

    :4295
Children
No Data