Symantec 11281411 Administration Guide - Page 133

Setting exclusions, For virus sweep, manual, Auto-Protect, and scheduled scans, Symantec

Page 133 highlights

Scanning for viruses and other threats 133 Configuring scan options Using the Symantec System Center, you can set exclusions for specific file extensions and folders. In addition, certain Symantec AntiVirus scans allow exclusion by named folder (for example, you can exclude scans of the path C:\Temp\Install). To maintain security, you cannot view or exclude specific files from the Symantec System Center. You can, however, exclude specific files using the Symantec AntiVirus client or server user interface. You may want to exclude files that trigger false positive alerts. For example, if you used another virus scanning program to clean infected files and the program did not completely remove the virus code, the file may be harmless but the disabled virus code might cause Symantec AntiVirus to register a false positive. Check with Symantec Technical Support if you are not sure if a file is infected. Table 3-5 describes exclusions. Table 3-5 Exclusions by object type Object type Server group Server Client group NetWare servers Exclusions available Server scans: File extensions and named folders ■ Server scans: File extensions, drivers, files, and folders ■ Client scans: File extensions, drivers, and named folders Client scans: File extensions, drivers, and named folders Files by drivers and named folders; you cannot exclude files by file extension Setting exclusions Symantec AntiVirus exclusions behavior is as follows: ■ When Symantec AntiVirus applies exclusions, the excluded items are not scanned. If the file is not excluded, it is scanned. ■ For virus sweep, manual, Auto-Protect, and scheduled scans, Symantec AntiVirus takes no action on excluded files. Enabling and disabling exclusions can improve performance depending on the situation. For example: ■ If you copied a large folder that was in the exclusions list and the exclusions setting was enabled, the copying process would not take as long since the folder's contents would be excluded. ■ If you copied a large folder that was not in the exclusions list, disabling exclusions would improve performance.

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216

133
Scanning for viruses and other threats
Configuring scan options
Using the Symantec System Center, you can set exclusions for specific file
extensions and folders. In addition, certain Symantec AntiVirus scans allow
exclusion by named folder (for example, you can exclude scans of the path
C:\Temp\Install). To maintain security, you cannot view or exclude specific files
from the Symantec System Center. You can, however, exclude specific files
using the Symantec AntiVirus client or server user interface. You may want to
exclude files that trigger false positive alerts. For example, if you used another
virus scanning program to clean infected files and the program did not
completely remove the virus code, the file may be harmless but the disabled
virus code might cause Symantec AntiVirus to register a false positive. Check
with Symantec Technical Support if you are not sure if a file is infected.
Table 3-5
describes exclusions.
Setting exclusions
Symantec AntiVirus exclusions behavior is as follows:
When Symantec AntiVirus applies exclusions, the excluded items are not
scanned. If the file is not excluded, it is scanned.
For virus sweep, manual, Auto-Protect, and scheduled scans, Symantec
AntiVirus takes no action on excluded files.
Enabling and disabling exclusions can improve performance depending on the
situation. For example:
If you copied a large folder that was in the exclusions list and the exclusions
setting was enabled, the copying process would not take as long since the
folder’s contents would be excluded.
If you copied a large folder that was not in the exclusions list, disabling
exclusions would improve performance.
Table 3-5
Exclusions by object type
Object type
Exclusions available
Server group
Server scans: File extensions and named folders
Server
Server scans: File extensions, drivers, files, and folders
Client scans: File extensions, drivers, and named folders
Client group
Client scans: File extensions, drivers, and named folders
NetWare servers
Files by drivers and named folders; you cannot exclude files
by file extension