VSE 7.1 - Wildcard exclusions do not work 1

[simonjcook]

Hi everyone,

After a little to-ing and fro-ing with NAI I have come to the conclusion that using wildcards in file and folder exclusions do not work with virusscan enterprise as per the manual.

We had an issue with excluding the InterScan folders on our mail gateway.

we tried
\InterScan?:\InterScan*:\InterScan
None stopped VSE from picking up infected files as they were written to disk.

The only exclusion that did work was by specifying the drive letter explicitly.

E:\InterScan


Regards

Simon J Cook

< Keyboard Error - Press F1 to continue >

 

[Yanze]

Try just typing the folder-name

InterScan

Does that work?

 

[simonjcook]

Point noted,

I haven't tried...

I want to avoid using folder names as a straight entry as
it is ambiguous as to whether it is a file or a folder.

My guess is, an entry such as...
InterScan
...would also exclude files by the same name unless "Also exclude subfolders" is ticked.

Considering the basic wildcard functionality doesn't work, I wouldn't hold out much hope for how that type of entry would behave.

Also, an additional effect of using that type of entry is to exclude the folder where-ever it appears in a path which is not our intention.



Regards

Simon J Cook

< Keyboard Error - Press F1 to continue >

 

[simonjcook]

Further info,

*:\folder\ doesn't work
?:\folder\ doesn't work
*\folder\ doesn't work
?\folder\ doesn't work, wouldn't expect it too... ? is a single character wildcard.

folder with exclude subfolders ticked *does* work

However,
1) it is not immediately apparent it is a folder
2) according to the documentation this will exclude the named folder where-ever it appears in a path.

This (server) folder exclusion policy is being applied from ePO directory level down.
The upshot is, any server with the named folder anywhere in it's directory structure would provide a hole for an infected file to reside in. A considerable unknown...
If "also exclude subfolders" is *not* ticked then this exclusion would probably exclude files by the same name.

Stop press...
\folder does work, it seems removing the trailing \ makes this non drive specific root folder exclusion work.

Regards

Simon J Cook

< Keyboard Error - Press F1 to continue >