Anti-Virus recommendations for CA Service Catalog
Article ID: 387552
Updated On:
Products
Issue/Introduction
When planning the installation of CA Service Catalog, it is very important you set exceptions in any anti-virus software configuration.
Additionally, there are scenarios where somehow the Anti-Virus is enabled after CA Service Catalog is installed (i.e. Windows Group Policy settings). When it happens, you can face performance issues or even unexpected behaviors when starting up and running CA Service Catalog. It will sound like network or infrastructure issues, but in the end, you will realized the issues happen because of the anti-virus.
Environment
CA Service Catalog 17.x
Resolution
We recommend that you exclude the CA Service Catalog Install Folder (USM_HOME) from the anti-virus (AV) scan. By default, this directory on a 64-bit Windows OS is "C:\Program Files\CA\Service Catalog".
We have come across scenarios with the anti-virus scanner locking some of the CA Service Catalog files (binary and other files), which in-turn causes issues. We have also seen instances where the anti-virus scanner locks the USM_HOME\logs folder and its contents, which causes log files to prematurely roll over.
Additional Information
In addition, depending on how strict the anti-virus policy that is being enforced, it may also be necessary to add the CA Service Catalog ports to the low risk or exclusion list.
Below is the list of default ports used by CA Service Catalog (note that these port values may be different based on how CA Service Catalog was installed and configured in the environment)
Feedback
