What CCS directories to exclude or whitelist in the Anti-Virus application

Products

• Control Compliance Suite Standards Server
• Control Compliance Suite
• Control Compliance Suite Standards Module
• Control Compliance Suite Standards Database

Issue/Introduction

With the different anti-virus and other applications that monitor servers, you would like to know what to exclude or whitelist so not to impact functionality in CCS.

Environment

CCS 12.6.x

CCS 12.7

Resolution

Whitelist or exclude both of the following directories, including all sub directories to make sure CCS is not impacted by anti-virus software.  The dissolving agent is used for agentless data collection, and also can be used on servers that have the agent installed for some checks in the Ad hoc queries and standards.

Default location:
<drive>\Program Files (x86)\Symantec\

NOTE: If the installation path of CCS was customized during installation, that custom path will need to be whitelisted or excluded as well.

Path of the CCS Dissolving agent:

<drive>\Program Files (x86)\BindView\

Both the default paths and dissolving agent path above need to be excluded or whitelisted for both agentless and agent-based data collection for CCS to work correctly