WebAdmin bad behavoir when configuring Endpoint Protection Antivirus File/Folders Exceptions

Question

Greetings, I'm having problems when trying to configure the UTM Endpoint Protection Antivirus Exceptions to protect an Exchange 2013 server. 
 Exchange requires a sizable list of exclusions . 
 When I try to enter the file/folder exceptions, the UTM UI comes back with unexpected results. 
 Why is it doing this? 
 This is UTM 9.407-3, with the home license. 
 Here's a screencap of a newly-entered file/path exclusion:

And here's how that exclusion appears after clicking Save. Note the path!

And then if I click edit ...

rfcat_vk · Accepted Answer

Hi, 
 I will take a guess that your delimiters are seen as control or similar characters and maybe need to be enclosed in quotes or similar. 
 I don't see any way of the UTM configuration identifying your E folder as being part of your exchange server? 
 Please check the UTM knowledgebase for detailed instructions.

QC · Answer

Hello TimothyTrace, 
 I'm not a UTM guy 'twas just Exclusion ...bugs? which caught my attention. As said I'm not familiar with the UTM UI (but at least with AV exclusions). Wonder if it's the \0 combination as the backslash should generally work. So just to test please try a path with characters other than 0 after the backslash (I know, this is not what you need but ...). Maybe just the \0 gets eaten, maybe others as well. I'd also check what's in the computer's AV settings - whether it's the slashless path or not. Unlikely but I've seen similar bugs it could be that the \0 is misinterpreted when it's read back for display in the GUI but correct in the policy. 
 Christian 
 P.S. and BTW: Even as the KB article says must the exclusions are not necessarily necessary (forgive the bad pun) . We have without problems none of them in place for our Exchange servers.

zaphod · Answer

Hi can confirm that you dont need exclusions for running exchange smoothly with utm endpoint protection.. 
 seems to be a quoting bug... maybe need to set it in "path" or something like \/ or /\ to get it not interpreted...

QC · Answer

Hello TimothyTrace , 
 don't think it's the drive letter. Here are strings I'd try (just for narrowing down): E:\0a\1b\2c\3d\4e\5f\6g\7h\8i\9j\ZZ\ and E:\01\0f\0g\01g . 
 Christian

zaphod · Answer

you can request features here: 
 
 http://ideas.sophos.com/forums/17359-utm-formerly-asg-feature-requests