symantec endpoint protection cloud file exclusions

At work, we use McAfee Virusscan Enterprise (VSE) on all 600 or so nodes. To add my personal opinion (and I will stress it is merely that), I use a couple of different AVs. This might be as a result of in situ testing in your lab, product demonstrations, reviews, trusted peer recommendations and so on. In my opinion, you should use a product you feel comfortable with. mentioning anti-virus, anti-malware or anti-anything to a room full of IT professionals is likely to elicit a spectacular response, as no one will ever agree on which is the 'best'. Not wanting to enter a debate about nor having any prejudice towards any AV products (I feel you are free to use, within reason, whatever you are comfortable with), it is worth asking yourself whether you have the correct product if it lacks wildcard features in an enterprise-class deployment? You might not be able to replicate the exact recommendations of the document and given the feature set, that is to be expected. This will exclude the AD DS files but not the SoftwareDistribution area common to all servers. In terms of an Active Directory Domain Controller, manual exclusions can be made in the registry if SEP was installed before the DC promotion process.

This might mean excluding an entire directory to ensure the wildcard paths are excluded. That document does not take into account each AV product's features, so interpretation of it is required to ensure the proper exclusions over each file is in place. You're certainly right - if wildcard support is lacking, you have an issue with the Microsoft document.

Symantec endpoint protection cloud file exclusions