This article discusses Antivirus exclusions (also known as exceptions) that are recommended for the LANDesk Core Server.
When installing Antivirus on the LANDesk Core server, it is recommended to set the Real-time Portection File Types to Scan option to "Scan infectable files only". This is set within the LANDesk Antivirus settings on the "Real-time Protection" tab.
For a list of what LANDesk Antivirus considers "Infectable files" see this article.
For the full scheduled virus scans, it is recommended to set the scan to "Scan all file types". This is set in the LANDesk Antivirus Settings in the "Virus scan" tab.
For general information about Antivirus Exclusions, see this article.
For specific information on configuring Antivirus Exclusions for specific server types (IIS, SQL, Exchange, Etc) see this article.
Some Antivirus products (LANDesk Antivirus included) have separate exclusions lists for real-time scanning and on-demand scanning. Most exclusions will apply only to Real-time Scanning, as scanning some directories during computer operation can severely impact performance.
Antivirus exclusions need to be set both in the "Real-time protection" tab and the "Virus Scan" tab within the LANDesk Antivirus settings.
Configuring Antivirus exclusions for a LANDesk Core Server
As most LANDesk Core servers house IIS for the web console, general Antivirus exclusion instructions should be followed that pertain to IIS:
Create the following exclusions:
- The IIS compression directory (default compression directory is %systemroot%\IIS Temporary Compressed Files)
- The %systemroot%\system32\inetsrv folder
- Files that have the .log extension
If the SQL Database resides on the core server, the following instructions should be followed:
http://support.microsoft.com/kb/309422
LANDesk specific directories:
\Program Files\LANDesk\Managementsuite\brokerreq
\Program Files\LANDesk\Managementsuite\IncomingData
\Program Files\LANDesk\Managementsuite\ldscan
\Program Files\LANDesk\Managementsuite\log
\Program Files\LANDesk\Managementsuite\sdstatus
\Program Files\LANDesk\Managementsuite\xddfiles
\Program Files\LANDesk\Managementsuite\vulscanresults
General Exclusion information for Microsoft Operating Systems