App Vols, Mirage, Horizon Antivirus Exclusions
VMware App Volumes Antivirus Exclusions
On Desktops:
- C:\Program Files (x86)\CloudVolumes
- C:\SnapVolumesTemp
- C:\SVROOT
VMware Mirage Antivirus Exclusions
On the Servers:
- Mirage Storage Volumes
- Mirage Local Cache. This is configured during installation, but is located by default at:
- C:\ProgramData\Wanova\Mirage\LocalCache
On Desktops:
- Mirage Staging Area – C:\Wanova Volume Information
- Configure these services to be white listed by the computer protection software:
On the Servers:
- Wanova.Management.Service.exe
- Wanova.Server.Service.exe
On Desktops:
- Wanova.Desktop.Service.exe
VMware Horizon Antivirus Exclusions
General Exclusions for All Windows Platforms
• Pagefile.sys
• *.pst
• %systemroot%\System32\Spool (replace %systemroot% with actual directory)
• %systemroot%\SoftwareDistribution\Datastore (replace %systemroot% with actual directory)
• %allusersprofile%\NTUser.pol
• %systemroot%\system32\GroupPolicy\registry.pol
Microsoft Active Directory Domain Controller
• <drive>: \ WINNT \ SYSVOL
• <drive>: \ WINNT \ NTDS
• <drive>: \ WINNT \ ntfrs
• <drive>: \ WINNT \ system32 \ dhcp
• <drive> : \ WINNT \ system32 \ dns
Microsoft IIS Server
• Web Server log files should be excluded from scanning. By default, IIS logs are saved in
• <drive>: \ WINNT \ system32 \ LogFiles
• <drive>: \ WINNT \ system32 \ IIS Temporary Compressed Files
Cisco CallManager
• Drive:\Program Files\Call Manager
• Drive:\Program Files\Call Manager Serviceability
• Drive:\Program Files\Call Manager Attendant
Microsoft SQL Server
Because scanning may hinder performance, large databases should not be scanned. Since Microsoft SQL Server databases are dynamic, exclude the directory and backup folders from the scan list. If it is necessary to scan database files, a scheduled task can be created to scan them during off-peak hours.
• <drive>: \ Program Files \ Microsoft SQL Server \ MSSQL \ Data
• <drive: \ WINNT \ Cluster (if using SQL Clustering)
• Q:\ (if using SQL Clustering)
Cluster Servers
• Q:\ (Quorum drive)
• C:\Windows\Cluster
Microsoft Sharepoint Portal Server
• <drive>: \ Program Files \ SharePoint Portal Server
• <drive>: \ Program Files \ Common Files \ Microsoft Shared \ Web Storage System
• <drive>: \ Windows \ Temp \ Frontpagetempdir
• M:\
Microsoft Systems Management Server (SMS)
• SMS \ Inboxes \ SMS_Executive Thread Name
• SMS_CCM \ ServiceData
• Microsoft Operations Manager Server (MOM)
• <drive>: \ Documents and Settings \ All Users \ Application Data \ Microsoft \ Microsoft
• Operations Manager
• <drive>: \ Program Files \ Microsoft Operations Manager 2005
Microsoft Internet Security and Acceleration Server (ISA)
• <drive>: \ Program Files \ Microsoft ISA Server \ ISALogs
• <drive>: \ Program Files \ Microsoft SQL Server \ MSSQL$MSFW \ Data
Microsoft Windows System Update Server (WSUS)
• <drive:> \ WSUS
• <drive:> \ WsusDatabase
Other file extension types that should be added to the exclusion list include large flat and designed files, such as VMware disk partitions. Scanning VMware partitions while attempting to access them can affect session loading performance and the ability to interact with the virtual machine.
• Exclusions can be configured for the directories that contain the Virtual Machines, or by excluding *.vmdk and *.vmem files.
• VMware View Connection Server—Java Message Bus
Source: http://www.vmware.com/files/pdf/VMware-View-AntiVirusDeployment-WP-en.pdf
