Trellix ENS Exclusions

[Radu]

Hi,

Are there any recommended exclusions for Trellix ENS / Agent that should be in place for other Anti-Virus solutions? We have Microsoft Defender EDR exclusions set up on Trellix ENS and wondering if Trellix ENS / Agent folders / processes needs to be excluded also on Microsoft EDR solution.

Thank you.

[ueno · Accepted solution]

Hi @Radu,

There are no specific recommended exclusion settings in ENS, so if you want to exclude ENS, you would probably want to exclude the processes and folders listed in the KB below.

[Processes and drivers that Endpoint Security installs]
https://kcm.trellix.com/corporate/index?page=content&id=KB87791

[Radu]

Thank you.

[justin_73]

Are you required to have two separate antivirus products running in your environment?

[Pravas]

Hi @justin_73 ,

Its not recommended to have multiple AVs on a system as it may have any adverse affect.

Source:- https://kcm.trellix.com/agent/index?page=content&id=KB89595

The OP question was with regards to EDR, so we've shared the Process Names & Paths used by ENS.

Thanks

[justin_73]

Thank you for the clarification as well as the link.  I have a coworker who believes we should have the Windows Defender feature added on our 2016 ePO server and ready to take over for ENS in the event it fails for some reason.  This document clearly states this is a bad idea.