Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 1 subscriber
  • Views 3898 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Validating Exceptions

BeaconLightBoy

Does anyone know any way to validate the exceptions we enter under on access scanning are indeed being excluded.  I have had an issue with exclusions not working in the past, especially directory based exceptions, and recently another problem has come to light and i want to be sure the excluded files are not being scanned.  Any idears?

:15277


This thread was automatically locked due to age.
Parents
  • 0

    Here is what i did.

    I modified an OnAccess scanning policy to exclude a network directory that exists on FileServer1.  I then modify the policy that 

    fileserver1 is using to exclude that directory for OnAccess scanning.  Then, from a workstation that has scanning disabled.  I copy the file to fileserver1's excluded directory.  On the server console you see that it has found the eicar virus.  But, it doesn't deal with it, just tells me that it has found a dangerous file.  If i remove the exclusion, and then do the same procedure, the virus is found and is quarantined immediately.

    So again, if an excluded directory is truly excluded, why would i even get a warning about a dangerous file.

    :15337
Reply
  • 0

    Here is what i did.

    I modified an OnAccess scanning policy to exclude a network directory that exists on FileServer1.  I then modify the policy that 

    fileserver1 is using to exclude that directory for OnAccess scanning.  Then, from a workstation that has scanning disabled.  I copy the file to fileserver1's excluded directory.  On the server console you see that it has found the eicar virus.  But, it doesn't deal with it, just tells me that it has found a dangerous file.  If i remove the exclusion, and then do the same procedure, the virus is found and is quarantined immediately.

    So again, if an excluded directory is truly excluded, why would i even get a warning about a dangerous file.

    :15337
Children
No Data