Endpoint Protection

  • 1.  Excluding files/folders from scheduled scans

    Broadcom Employee
    Posted 05-26-2015 06:24 AM

    I am using a client version of SEP 12.1.5 provided by my employer on my home machine.

    I have over 9 million files on my machine, the vast majority of which never change. I would like to exclude them from my weekly scheduled scan, which now takes about 15 hours to complete. I admit that I do not understand the documentation on exceptions, but it appears that none of the available exception types (Security Risk, SONAR, DNS or Host File Change, Application) apply to such things as the videos, photos, music, and ebooks that I would prefer not be scanned.

    How do I exclude such files from scheduled scans?


  • 2.  RE: Excluding files/folders from scheduled scans

    Posted 05-26-2015 06:27 AM

    They would all be excluded. You simply need to exclude whichever directory(s) they reside in. You're vest of excluding by directory or filename...directory would be easiest if they all are in the same folder structure.

    How to Create Scanning Exceptions for both Managed and Unmanaged Symantec Endpoint Protection Clients

  • 3.  RE: Excluding files/folders from scheduled scans

    Broadcom Employee
    Posted 05-27-2015 06:11 AM

    Unfortunately the article you linked to lists step that are impossible to perform. The article is dated 2010, and apparently the interface has changed since then. Below is the section in thr article about Exceptions, which I have annotated:

    How to set up Exclusions for an Unmanaged Client:

    1. Open the Symantec Endpoint Protection Client interface.
    2. Select "Change Settings" from the left-hand column.
    3. Select Configure Settings for "Antivirus and Antispyware Protection." (There is no such option available. The closest option is "Virus and Spyware Protection," so I selected that.)
    4. Select the "File System Auto-Protect" tab (No such tab. Closest is "Auto-Protect," so I selected that.)
    5. Select the Centralized Exceptions button. (No such button. No analog to guess at. No selection from this tab leads to an 'Add' option of any type.)
    6. Select Add and select the desired exclusion type and enter in your exclusion.


    Instead of "Virus and Spyware Protection" I could have selected the "Exceptions" item, but as I mentioned in my original post, Exception types (Security Risk, SONAR, DNS or Host File Change, Application) appear to apply to a type of threat and not a type of file, and hence don't help me prevent having millions of ebook, photo, music, and video files scanned.

  • 4.  RE: Excluding files/folders from scheduled scans

    Posted 05-27-2015 09:33 AM

    For 12.1.5, open the SEP GUI and select Change Settings >> Exceptions >> Configure Settings

    From here you get a window which allows you to set Exceptions.

    Security Risk let's you set a Extention Exception...so you can set that. SONAR only allows a folder exception.

    You do not need to worry about DNS or Host File changes, they won't apply in this situation.