Microsoft Defender Setup and Antivirus Exclusions for CA Application Performance Management (APM)
Article ID: 445014
Updated On:
Products
Issue/Introduction
When planning to deploy an endpoint protection agent (such as Microsoft Defender) on a CA Application Performance Management (APM) server, specific exclusions must be applied to ensure a smooth deployment.
Failure to apply the correct directory, process, and port exclusions can result in performance degradation, service disruptions, and database conflicts.
Administrators require the exact exclusion list and endpoint protection guidelines for the APM environment.
Resolution
To avoid potential conflicts and performance issues, apply the following guidelines and exclusions when configuring Microsoft Defender or any other endpoint protection solution in an APM environment.
1. APM Database Server Warning
WARNING: Do not run antivirus software on the APM Database server.
Antivirus software actively scanning database files can severely reduce database performance and may cause the APM database to run slowly or become unresponsive.
2. Directory Exclusions
To prevent file-locking issues and performance degradation during active monitoring, exclude the following core APM directories from active/real-time scanning:
datadirectorieslogsdirectoriestracesdirectories
(Note: Ensure you apply these exclusions to the specific installation paths where your APM components are deployed).
3. Network Port Exclusions (Firewall / Network Protection)
Ensure that your endpoint protection solution's firewall or network scanning features keep the following internal and external communication ports open:
| Component | Port Number | Description |
| Enterprise Manager | 5001 | Default port for EM communication. |
| WebView | 8080 or 8443 | Default HTTP (8080) or secure HTTPS (8443) ports. |
| Enterprise Manager Web Server | 8081 | Default web server port for EM. |
| APM Database | 5432 | Default PostgreSQL database port. |
Additional Information
For more refer to documentation.
Feedback
