Tips for excluding SEG, ECM, or WebMarshal folders from Sophos scanning

This article applies to:

• Trustwave MailMarshal (SEG)
• Trustwave ECM/MailMarshal Exchange
• WebMarshal

Question:

• Sophos exclusions not working
• How to enter folder path names in Sophos exclusions

Information:

When a resident or on-access virus scanner is installed on a SEG, ECM, or WebMarshal server, certain folders must be completely excluded from scanning.

When entering exclusions for Sophos Anti-Virus, it is important to note the syntax for excluding an entire folder.

1. To exclude a folder, use a trailing backslash. If you do not enter the backslash, the last part of the specification is treated as a filename.
2. To exclude a folder with a Windows long name (over 8 characters), you must enter the long name AND the short version of the name.

For instance, enter BOTH of the following to correctly exclude the WebMarshal 6.X default Temp folder:

C:\Program Files\Marshal\WebMarshal\Temp\
C:\progra~1\Marshal\webmar~1\Temp\

Notes:

• For more information about Sophos exclusions, see Sophos knowledge base article 12370.
• For more information about the folders that must be excluded, see Trustwave Knowledgebase article Q10850 or the documentation for the specific product and version.