[KB3642] Exclude endpoint files or folders from Real-time scanning using ESET Remote Administrator (6.x)

Alert: Use the latest ESET product versions. Find out if your ESET product is affected by End of Life (EoL)

Alert: Information regarding the Log4j 2 vulnerability

[KB3642] Exclude endpoint files or folders from Real-time scanning using ESET Remote Administrator (6.x)

Issue

ESET business product no longer supported

This article applies to an ESET product version that is currently in End of Life status and is no longer supported. The content in this article is no longer updated.

For a complete list of supported products and support level definitions, review the ESET End of Life policy for business products.

Upgrade ESET business products.

File-level scanning of some email servers, backup software, Customer Relationship Management (CRM) software, etc. causes abnormal system behavior
Use ESET Configuration Editor to create a configuration that excludes specific applications or folders from Real-time scanning

Solution

Endpoint users: Perform these steps on individual client workstations

View permissions needed for least privilege user access

ERA 6.5 User Permissions

This article assumes that your ERA user has the correct access rights and permissions to perform the tasks below.

If you are still using the default Administrator user, or you are unable to perform the tasks below (the option is grayed out), see the following article to create a second administrator user with all access rights (you only need to do this once):

Create a second administrator user in ESET Remote Administrator 6.5

A user must have the following permissions for the group that contains the modified object:

*Functionality*	*Read*	*Use*	*Write*
Policies	✓	✓	✓

A user must have the following permissions for each affected object:

*Functionality*	*Read*	*Use*	*Write*
Groups & Computers	✓	✓	✓

Once these permissions are in place, follow the steps below.

Open ESET Remote Administrator Web Console (ERA Web Console) in your web browser and log in.
Click Admin → Policies and select your policy for client computers.
Click Policies → Edit.

Figure 1-1
Click the image to view larger in new window

Expand Settings, click Detection Engine → Basic and then click Edit in the Exclusions section.

Figure 1-2
Click the image to view larger in new window

Click Add, type the directory that you want to exclude from scanning into the field next to Exclude path and then click OK. Make sure the filepath for your exclusion is in the correct format, for example "C:Users[username]Documentsfile.exe".

Do not use wildcards for directories!

Wildcards for directories in paths are not supported. Read more about exclusions and wildcards here.

Figure 1-3
Click the image to view larger in new window

ERA 6.4 users

In ERA 6.4, there is only one option available for creating exclusions. Click Add, type the directory that you want to exclude from scanning into the given field and then click OK. Click here for a 6.4 screeenshot.

Click Save when you are finished adding exclusions.

Figure 1-4
Click the image to view larger in new window

Click Finish to save your changes.

Last Updated: Jan 4, 2021