locked
3rd party AV and OCS exclusions. RRS feed

  • Question

  • In reference to the follwoing technet article (http://support.microsoft.com/kb/943620) MS states the the OCS and Forefront for OCS installation folders must be excluded before performing a file-level AV scan on the server using a 3rd party AV product.  I would like a little bit more information on this topic.

    Does this exclusion recommendation apply to on-access scanning? If so, doesn't this open up the server to the possibilty of contracting a virus should said virus decide to "hide" in one of these two directories?

    If a virus does hide in this directory and is "invisible" to the 3rd party AV product (due to the exclusions), will Forefront for OCS detect and clean the directory?

    Thank you...

    Friday, August 7, 2009 5:36 PM

Answers

  • Excluding folders from AV Scans is general practice for many products
    If you don't exclude these folders then Forefront will not work correctly
    Forefront will not perform AV scanning for the exluded folders!

    Since only admins have access to servers, getting a virus on the server will be a rare thing.
    You could however schedule a Full System scan at night and include the folders in that scan.
    (The problem is that real time scanning blocks access to files)
    - Belgian Unified Communications Community : http://www.pro-exchange.be -
    Saturday, August 8, 2009 2:46 PM