Symantec Endpoint Protection is in need of a customizable Trusted Process setting or policy instead of having only hard coded Trusted Processes such as Windows Indexer. There is a policy based setting that states "Do not scan file when trusted processes access the file under >> Policies >> Virus and Spyware Protection >> Auto-Protect >> Scan Details Tab >> Advanced Scanning and Monitoring. The problem we face on a daily basis is other security tools that perform security functions or file scanning also get scanned by SEP. This causes major I/O problems on the computers and cost the company tons of money in lost productivity. Is there a way to "define" a trusted process for SEP currently? Is there a listing of "Trusted Processes" that are hard coded into SEP currently? I have found ways tell SEP not to scan the process, but not the files that the process touches.
↧