You can also use exclusions to allow isolated devices to communicate with other devices under restrictions. Exclude folders or applications from ransomware protection.
Exclude previously detected malicious behavior exploits (Windows). Exclude applications that are normally detected as spyware and previously detected exploits from scanning and detection (Windows/Mac). Exclude applications from protection against security exploits (Windows/Mac). Exclude websites from checking (Windows/Mac). If you exclude files from scanning, we'll still check the excluded items for exploits.Įxclude from checking any process that runs from an application (Windows). You can set up the following types of exclusion: If you want exclusions to apply only to certain users or servers, use policy exclusions instead. Global exclusions apply to all your users (and their devices) and servers. For more information on how we detect threats see Sophos Threat Center. You use exclusions to tune the detection behavior of Sophos Central. Variableīe careful if you use this variable to set up exclusions as it reduces your protection.You can exclude files, websites and applications from scanning for threats. The table below shows variables and examples of the locations they correspond to on each operating system. %windir%\\Temp\\%: This excludes C:\Windows\Temp\ from scanning. %WINDIR%\\Syswow64\\: This excludes C:\Windows\Syswow64\ from scanning. %WINDIR%\\System32\\: This excludes C:\Windows\System32\ from scanning. %WINDIR%: This excludes C:\Windows\ from scanning. %appdata%: This excludes C:\Users\**\AppData\Roaming\ from scanning. %temp%: This excludes C:\Users\**\AppData\Local\Temp\ from scanning. %USERPROFILE%: This excludes C:\Users\**\ from scanning. %programdata%: This excludes C:\ProgramData\ from scanning. It's risky to generalize the exclusion to cover more files and folders that you need to.īe careful if you use the following variables to set up exclusions as they decrease your protection. Make your variables as specific as possible. You can use variables when you set up scanning exclusions. ExpressionĮxclude any file named foo (in any location).Įxclude any file named bar in a folder named foo (in any location).Įxclude all files named *.txt (in any location).Īll files and folders underneath C:\foo, including C:\foo itself.Īll files or folders contained in C:\foo named *.txt. Here are some examples of the use of wildcards. matches all files without an extension.įor example: "foo." matches "foo" and "foo". If it is at the end of a string it can match zero characters.Ī period OR the empty string at the end of a filename, if the pattern ends in a period and the filename does not have an extension. We recommend that you don't use this wildcard by itself. c:\foo\**\bar matches: c:\foo\bar, c:\foo\more\bar, c:\foo\even\more\barīe careful if you use this wildcard to set up exclusions as it reduces your protection.įor example, if you set up an exclusion using just this wildcard it excludes everything in every folder from the root of the drive down. Zero or more characters including \ and /, when bracketed by \ or / characters or used at the start or end of an exclusion.Īny other use of a ** is treated as a single * and matches zero or more characters excluding \ and /. Zero or more of any character except \ or / You can use the wildcards shown in this table. It's risky to generalize the exclusion to cover more files and folders that you need to. 
Make your wildcards as specific as possible. You can use wildcards when you set up scanning exclusions.
We recommend that you don't exclude these folders from scanning because this reduces your protection significantly.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp\. #SOPHOS HOME SCANNING EXCEPTIONS FULL#
Use the full file path instead.ĭon't exclude folders where malware is most often located. Excluding *.exe excludes your app but also all other. Suppose you need to exclude C:\Program Files\Software\app.exe. Exclude specific files or folders instead. We recommend that you don't set up an exclusion for a whole drive. If you set up a scanning exclusion for C: it excludes all of your C drive. It's risky to generalize the exclusion to cover more files and folders than you need to. Make your exclusions as specific as possible. Only use them if you understand the risks. Scanning exclusions may significantly reduce your protection.
0 kommentar(er)
