Endpoint Protection exclusions for Backup Exec


Article ID: 157740


Updated On:


Endpoint Protection


Backups are failing/stalling out or Backup Exec processes are crashing and you suspect SEP to be involved.


1. Create exceptions for Backup Exec processes within Endpoint Protection:

If SEP is unmanaged (Open SEP, head to Help-Troubleshooting. If no server name or IP address is listed then it is unmanaged):

     a. Open the SEP client software, click on Change Settings, and Configure Settings next to Exceptions

     b. Click Add, and Application Exception

     c. In the Browse window, drill down to the BE or RAWS installation directory and choose one of the EXEs listed below:


     d. Repeat this process until all the EXEs are in the Exceptions list

If SEP is managed (Open SEP, head to Help > Troubleshooting. If a server name or IP address is listed then it is managed):

     a. Open the manager, head to Policies, either open the current Exceptions policy or create one if none exists

     b. Once in the policy, click the Exceptions section on the left, Add, Windows Exceptions and File

     c. In the new window, leave Prefix Variable set to NONE, if you see check boxes on the left, put a check next to all the boxes available (Security Risk, SONAR, Application Control).

     d. Make certain that the drop-down menu displays "All Scans"

     e. In the File field enter the full path to the EXE (for example, C:\Program Files\Symantec\Symantec Backup Exec\BackupExec.exe)

     f. Click OK, and repeat this process for all the EXEs listed above