Howto: create a scanning exclusion in sophos central that also works in subfolders

Hi,

Excluding:

C:\folder\

will exclude all files under C:\folder\ and files in all sub-dirs.

Note: you always need a trailing backslash to define a folder exclusion, otherwise you're excluding a non existent file called C:\folder.

More info here:

http://docs.sophos.com/sophos-cloud/customer-dashboard/help/en-us/webhelp/index.htm#general/ExclusionsVariables.htm#concept_dxh_vsf_pp

A good test is to use the Eicar test file.  This will help you prove the exclusions are working.   http://www.eicar.org/86-0-Intended-use.html

You can can copy the eicar string of characters into a .txt file.  E.g. eicar.txt, it will not be detected by default as a .txt.  If you rename it to .com it will be detected unless of course the file/directory is excluded.

Regards,

Jak

Link no longer works. Where are you hiding this information now??

Hello Howiedog,

Where are you hiding this information now?? [emphasis mine]
Jak isn't Sophos, he's not hiding anything [:)]

Please see Threat Protection Policy and contained links. Note that the information is somewhat incomplete (for whatever reason). Details on exclusions are in Information on 10.6.3 (variables) and Information on 10.6.4 (wildcards).

Christian

Hi Howiedog,

The information is available in Sophos Central Admin under the topic Windows Scanning Exclusions: Wildcards and Variables.