How to create exception rules for file extensions

[sanba06c]

Hello,

We're installing the third party app, which requires the exemption from the ENS for relevant file extensions and executables.

As for file extensions, can I just create the exception rules under On-Access Scan, Endpoint Security Threat Prevention? When it comes to "File type", can I put the file extensions like this: "pro, projection, prw, ptv" for many different ones?   

Thank you in advance.

[Former Member]

Hello @sanba06c 

Please refer the below link for exclusions:

https://docs.mcafee.com/bundle/endpoint-security-10.5.0-threat-prevention-product-guide-epolicy-orch...

Was my reply helpful?
If this information was helpful in any way, or answered your question, will you please select "Accept as Solution" in my reply, or give kudos as appropriate, so together we can help other members?

[sanba06c]

@Former Member , I'm aware of this article. In this case, I want to receive a more detailed advice.

[Former Member]

Hi @sanba06c 

No, if you specifically specify file type, the character length is restricted.

However you can achieve the same by adding a file exclusion such as **.pro, **.projection

More on wildcards can be found here: https://kc.mcafee.com/corporate/index?page=content&id=KB54812

[sanba06c]

@Former Member Is the separation of file types by "comma" correct syntax? I've already set the rules, but am not sure whether it works well.

[Former Member · Accepted solution]

Hi @sanba06c 

No, you would list these as separate exclusions. (Sorry if my response was unclear, I was just listing different options :-))

So you would have

exclusion 1: **.pro

exclusion 2: **.abcxyz

etc.

If you want to post a screenshot of what you have defined, I will happily check and clarify what you have defined.

[sanba06c]

@Former Member, You can click on the link for the screenshot (cannot upload the file on this platform due to my company's security policy)

[Former Member]

@sanba06c Thanks for sharing.

So, as you've feared the current settings won't have any effect. You will need to split out each exclusion separately. So each file type needs to be its own entry.

[sanba06c]

@Former Member can I also do it in the "file type" exception rule? If it is possible, I just need to mention the file types without directory. 

[Former Member]

You will be able to use the "file type" exception rule for some i.e. .log or .txt but for longer ones i.e. .project you will not as there is a character limit.