Microsoft has recommended configuring trusted zones for security solutions, which if not done correctly can give rise to issues such as system getting hanged, slow or non-responsive. These configurations involve excluding certain directories, and file names from file-level scanners.
Note: After you have installed Seqrite AntiVirus on a system running MS Exchange, as a first step you must follow the guidelines and instructions listed below to exclude files and folders recommended by Microsoft.
Steps to follow:
- Open Seqrite Antivirus for Server.
- On the Seqrite AntiVirus for Server Dashboard, click Files & Folders.
- On the Files & Folders screen, click Exclude Files & Folders. (Note: Here you can see the list of excluded files and folders that have been added)
- To add a new file or folder, click Add. The New Exclude Item screen appears.
- In the Item text box, provide the path to the file or folder. You can also click the file or folder icon to select the path. (Note: Ensure that you provide the path to the correct file or folder)
- Under Exclude from, select Known Virus Detection.
- Click OK.
- Click Save Changes to save your settings.
The following list/locations is recommended by Microsoft for Microsoft Exchange server:
Microsoft Exchange Server:
%ProgramFiles%\Microsoft\Exchange Server\Mailbox\*.*
%ProgramFiles%\Microsoft\Exchange Server\GroupMetrics\
%ProgramFiles%\Microsoft\Exchange Server\Logging\*.*
%ProgramFiles%\Microsoft\Exchange Server\ExchangeOAB\
%ProgramFiles%\Microsoft\Exchange Server\Working\OleConvertor\
%ProgramFiles%\Microsoft\Exchange Server\TransportRoles\*.*
%ProgramFiles%\Microsoft\Exchange Server\ClientAccess\*.*
%ProgramFiles%\Microsoft\Exchange Server\UnifiedMessaging\grammars\
%ProgramFiles%\Microsoft\Exchange Server\UnifiedMessaging\Prompts\
%ProgramFiles%\Microsoft\Exchange Server\UnifiedMessaging\voicemail\
%ProgramFiles%\Microsoft\Exchange Server\UnifiedMessaging\badvoicemail\
%ProgramFiles%\Microsoft\Exchange Server\UnifiedMessaging\temp\
%ProgramFiles%\DAGFileShareWitnesses\
%ProgramFiles%\Exchsrvr\MDBDATA\*.edb
%ProgramFiles%\Exchsrvr\MDBDATA\*.stm
%ProgramFiles%\Exchsrvr\MDBDATA\*.chk
%ProgramFiles%\Exchsrvr\MDBDATA\*.log
%ProgramFiles%\Exchsrvr\MDBDATA\*.dat
%ProgramFiles%\Exchsrvr\MDBDATA\*.stf
%ProgramFiles%\Exchsrvr\Mtadata\*.*
%ProgramFiles%\Exchsrvr\%COMPUTERNAME%.log
%ProgramFiles%\Exchsrvr\Mailroot\
%ProgramFiles%\Exchsrvr\Srsdata\*.*
%SystemRoot%\Temp\ExchangeSetup\*.*
%SystemDrive%\inetpub\temp\*.*
%SystemDrive%\inetpub\logs\*.*
Cluster:
%systemroot%\Cluster\*.*
IIS server:
%systemroot%\system32\inetsrv\*.*
Note:
- %SYSTEMROOT% specifies the location of the Windows folder i.e C:\WINDOWS e.g. %SYSTEMROOT%\System32 = C:\WINDOWS\System32
- %ProgramFiles% specifies the location of the Program Files folder i.e C:\Program Files.
- %SYSTEMDRIVE%\ specifies the location of Systems root drive i.e. C:\
- *.* specifies include Sub Folder.
- Exclude all files having extensions '.edb,.stm,.chk,.log,.dat,.stf' from '%ProgramFiles%\Exchsrvr\MDBDATA\' location.
For more details, please go through below mentioned links to see complete list of exclusions provided by Microsoft for MS Exchange.
