Fortinet black logo

EMS Administration Guide

Exclusions

Exclusions

Enable exclusions from antivirus (AV) scanning. FortiClient EMS supports using wildcards and path variables to specify files and folders to exclude from scanning. EMS supports the following wildcards and variables:

  • Using wildcards to exclude a range of file names with a specified extension, such as Edb*.jrs
  • Using wildcards to exclude all files with a specified extension, such as *.jrs
  • Path variable %allusersprofile%
  • Path variable %appdata%
  • Path variable %localappdata%
  • Path variable %systemroot%
  • Path variable %systemdrive%
  • Path variable %userprofile%
  • Path variable %windir%

Combinations of wildcards and variables are not supported.

Having a longer exclusion list affects AV performance. It is advised to keep the exclusion list as short as possible.

Note

Exclusion lists are case-sensitive.

Note

When excluding a network share, you may enter the path using drive letters (Z:\folder\) or the UNC path (\\172.17.60.193\fileserver\folder).

Options

Description

Paths to Excluded Folders

Enter fully qualified excluded folder paths in the provided text box to exclude these folders from RTP and on-demand scanning.

Paths to Excluded Files

Enter fully qualified excluded files in the provided text box to exclude these files from RTP and on-demand scanning.

File Extensions Excluded from Real-Time Protection

RTP skips scanning files with the specified extensions.

File Extensions Excluded from On Demand Scanning

On-demand AV protection skips scanning files with the specified extensions.

Exclusions

Enable exclusions from antivirus (AV) scanning. FortiClient EMS supports using wildcards and path variables to specify files and folders to exclude from scanning. EMS supports the following wildcards and variables:

  • Using wildcards to exclude a range of file names with a specified extension, such as Edb*.jrs
  • Using wildcards to exclude all files with a specified extension, such as *.jrs
  • Path variable %allusersprofile%
  • Path variable %appdata%
  • Path variable %localappdata%
  • Path variable %systemroot%
  • Path variable %systemdrive%
  • Path variable %userprofile%
  • Path variable %windir%

Combinations of wildcards and variables are not supported.

Having a longer exclusion list affects AV performance. It is advised to keep the exclusion list as short as possible.

Note

Exclusion lists are case-sensitive.

Note

When excluding a network share, you may enter the path using drive letters (Z:\folder\) or the UNC path (\\172.17.60.193\fileserver\folder).

Options

Description

Paths to Excluded Folders

Enter fully qualified excluded folder paths in the provided text box to exclude these folders from RTP and on-demand scanning.

Paths to Excluded Files

Enter fully qualified excluded files in the provided text box to exclude these files from RTP and on-demand scanning.

File Extensions Excluded from Real-Time Protection

RTP skips scanning files with the specified extensions.

File Extensions Excluded from On Demand Scanning

On-demand AV protection skips scanning files with the specified extensions.