Exclude ENS

[gl1221]

Hi,

Does mcafee has a list of ENS processes/folders that should be excluded in other vendors. like Symantec DLP, we dont want Symantec DLP to analyze mcafee ENS processes.

I searched and found KB87791 but looks like it was not what i want, as it only lists ENS processes, no ENS programdata folders, no ENS driver files, no ENS SystemCore folders and so on......

[hnegishi]

Hi @gl1221 ,

Thanks for posting on the community.

As you say there is no article to mention recommendation of exclusion for other vendor software.

However we can suggest following folders and files for ENS exclusion.

[Folders]
\Program files\McAfee\
\Program files (x86) \McAfee\
\Program Files\Common Files\McAfee\
\ProgramData\McAfee\

[Files]
C:\Windows\system32\mfevtp.exe
C:\Windows\System32\Drivers\mfe*.sys

[gl1221]

Hi @hnegishi ,

thanks, do we have an official document for this btw?

[hnegishi]

Hi @gl1221 

I'm afraid we don't have official document for the suggestion.

This suggestion indicates to exclude program folder/data folder/drivers for ENS.