Can you provide the best practice on-access scanning file/folder exclusions which are applicable to Windows 7 and Server 2008?
Thanks,
Scott
This thread was automatically locked due to age.
Hi,
I don't believe there are any particular files or folders you might want to consider excluding on a default Windows 7 install and as for 2008 it would really depends on the roles you install.
As a general rule, on-access scanning exclusions are typically made for files which change often and therefore have to be constantly re-scanned. Database files are a good example. If you have an application which reads and writes to a data file, there might be performance advantages in excluding that data file but of course the risk of doing so must be considered.
The following links should help:
http://support.microsoft.com/kb/309422/en-us as linked from http://www.sophos.com/support/knowledgebase/article/60468.html is worth a look if you are running a SQL server for example. http://www.sophos.com/support/knowledgebase/article/12214.html should help if you have Exchange.
http://www.sophos.com/support/knowledgebase/article/35970.html also contains some links you might find useful as does: http://www.sophos.com/support/knowledgebase/article/13595.html
I hope this helps.
Thanks
I am wondering if there is a way to exclude a specific place on a network sever from being scanned. We use Altiris to deploy our software and Sophos keeps blocking installs that are coming from our Altiris Servers on our endpoints. Is there a way to "trust" these locations so that the installs aren't blocked? I've searched the KB articles and haven't come up with anything. Thanks for any help!
Please see How do I: Exclude files, folders or drives from on-access scanning. You can exclude a folder (i.e. files and subfolders) using \\Server\Share\Folder\ or a network drive (depending on how these locations are accessed).Is this what you need?
Christian