impero anti-virus exclusionscdn.imperosoftware.com/knowledgebase/edupro/manuals/antivirus... ·...

© 2014 Impero Solutions Ltd.www.imperosoftware.com

Impero Anti-Virus Exclusions

http://www.imperosoftware.com


table of contents

Introduction 3

4ESET

10Kaspersky Security Centre

13McAfee VirusScan Enterprise

17Microsoft Forefront

19Sophos Enterprise

22Symantec Endpoint Protection

27Trend Micro OfficeScan

31Vipre Business Premium


© 2014 Impero Solutions Ltd.© 2014 Impero Solutions Ltd. 3

1 IntroductionIt is highly recommended when running Impero Education Pro that you have all the required Anti-Virus (AV) exceptions in place toensure smooth running of your Impero environment. The following document outlines the exceptions required and necessary stepsto adding these exceptions in a number of the more commonly used AV systems.

If you use an AV system that is not listed here, and are happy to assist Impero in documenting the required exceptions for your AVsystem, please contact Impero Support.

http://www.imperosoftware.com/contact/



1.1 ESETPlease follow the steps below in order to add the AV exceptions required for running Impero into your ESET Anti-Virus system.

- Open the ESET Remote Administrator Console (Image 1)

Image 1 - ESET Remote Administrator Console

- Go to 'Tools' and select 'Policy Manager' (Image 1.1)

Image 1.1 - ESET Policy Manager



- In 'Policy Manager', select the policy which is applied to all your client machines, and double-click on it. This will open your 'ESETConfiguration Editor' (Image 1.2)

Image 1.2 - ESET Configuration Editor

- Expand 'Windows desktop v5 > Kernel > Settings > Exclusions' and double-click, or click on 'Edit' (Image 1.3)

Image 1.3 - ESET Exclusions

- This open the window in which you can add the required exclusions (Image 1.4)

Image 1.4 - Add Exclusions

- Select the 'as a folder' radio button- Ensure that 'Exclude all threats' is ticked



- Add the following folders

C:\Program Files\Impero Solutions Ltd\C:\Program Files (x86)\Impero Solutions Ltd\C:\Program Files\GFI\LanGuard 11 Agent\C:\Program Files (x86)\GFI\LanGuard 11 Agent\

- Click 'OK' until you return to the policy editing window- Click on the 'Save' icon

- You can now add the applications to the Firewall- Select 'Windows desktop v5 > Personal Firewall > Settings > Rule Setup' (Image 1.5)

Image 1.5 - Zone and Rule Setup

- Click 'New', which will open the 'New rule' wizard (Image 1.6)

Image 1.6 - New Rule

- Enter a 'Name' for each rule you add, i.e. 'imperoclient.exe', 'ImperoClientSVC.exe'- Ensure the 'Direction' is set to 'Both'- Ensure the 'Action' is set to 'Allow'- Ensure the 'Protocol' is set to 'TDP & UDP'- Ensure the 'Profile' is set to 'For every'- Select the 'Local' tab and enter the full file path for each of the following into the 'Application' field:



C:\ProgramFiles\Impero Solutions Ltd\Impero Client\imperoclient.exe C:\ProgramFiles\Impero Solutions Ltd\Impero Client\ImperoClientSVC.exeC:\ProgramFiles\Impero Solutions Ltd\Impero Client\ImperoConsoleShortcut.exe C:\ProgramFiles\Impero Solutions Ltd\Impero Client\ImperoControlLibrary.dllC:\ProgramFiles\Impero Solutions Ltd\Impero Client\ImperoGuardianSVC.exe C:\ProgramFiles\Impero Solutions Ltd\Impero Client\ImperoKInit.exe C:\ProgramFiles\Impero Solutions Ltd\Impero Client\ImperoServerBrowser.exe C:\ProgramFiles\Impero Solutions Ltd\Impero Client\ImperoUtilities.exe C:\ProgramFiles\Impero Solutions Ltd\Impero Client\ImperoWinlogonApplication.exe C:\ProgramFiles\Impero Solutions Ltd\Impero Client\NRControlViewer.dllC:\ProgramFiles\Impero Solutions Ltd\Impero Server\ImperoServer.exe C:\ProgramFiles\Impero Solutions Ltd\Impero Server\ImperoServerSVC.exeC:\ProgramFiles\Impero Solutions Ltd\Impero Server\ImperoGuardianSVC.exeC:\ProgramFiles\GFI\LanGuard 11 Agent\httpd.exeC:\ProgramFiles\GFI\LanGuard 11 Agent\lnssatt.exeC:\ProgramFiles\GFI\LanGuard 11 Agent\lnsscomm.exeC:\ProgramFiles\GFI\LanGuard 11 Agent\mantle.exeC:\ProgramFiles\GFI\LanGuard 11 Agent\update.exe

C:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Client\imperoclient.exe C:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Client\ImperoClientSVC.exeC:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Client\ImperoConsoleShortcut.exeC:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Client\ImperoControlLibrary.dllC:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Client\ImperoGuardianSVC.exe C:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Client\ImperoKInit.exe C:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Client\ImperoServerBrowser.exe C:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Client\ImperoUtilities.exe C:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Client\ImperoWinlogonApplication.exe C:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Client\NRControlViewer.dllC:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Server\ImperoServer.exe C:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Server\ImperoServerSVC.exeC:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Server\ImperoGuardianSVC.exeC:\ProgramFiles (x86)\GFI\LanGuard 11 Agent\httpd.exeC:\ProgramFiles (x86)\GFI\LanGuard 11 Agent\lnssatt.exeC:\ProgramFiles (x86)\GFI\LanGuard 11 Agent\lnsscomm.exeC:\ProgramFiles (x86)\GFI\LanGuard 11 Agent\mantle.exeC:\ProgramFiles (x86)\GFI\LanGuard 11 Agent\update.exe

- Add the following entries, while clicking on 'OK' for each of the 'The rule is too general. Are you sure you want to add it?'messages- Minimise the Firewall node in the left-hand panel

- Expand 'Windows desktop v5 > HIPS > Settings'- Double-click 'Rules and Advanced Options' (Image 1.7)

Image 1.7 - HIPS System Settings Management



- Click on 'New' to open the 'Edit rule' window (Image 1.8)

Image 1.8 - Edit Rule

- Enter a 'name' for this rule, i.e. 'Impero Exclusions'- Leave the 'Action' set to 'Allow'- On the 'Source applications' tab, click on 'Add...' which opens the 'Edit application path' window (Image 1.9)

Image 1.9 - Edit Application Path

- Enter each of the full application paths as listed below, and click on 'OK' for each:


C:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Client\imperoclient.exe C:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Client\ImperoClientSVC.exeC:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Client\ImperoConsoleShortcut.exeC:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Client\ImperoControlLibrary.dllC:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Client\ImperoGuardianSVC.exe



C:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Client\ImperoKInit.exe C:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Client\ImperoServerBrowser.exe C:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Client\ImperoUtilities.exe C:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Client\ImperoWinlogonApplication.exe C:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Client\NRControlViewer.dllC:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Server\ImperoServer.exe C:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Server\ImperoServerSVC.exeC:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Server\ImperoGuardianSVC.exeC:\ProgramFiles (x86)\GFI\LanGuard 11 Agent\httpd.exeC:\ProgramFiles (x86)\GFI\LanGuard 11 Agent\lnssatt.exeC:\ProgramFiles (x86)\GFI\LanGuard 11 Agent\lnsscomm.exeC:\ProgramFiles (x86)\GFI\LanGuard 11 Agent\mantle.exeC:\ProgramFiles (x86)\GFI\LanGuard 11 Agent\update.exe

- Once completed, select the 'Target files' tab- Tick the 'Use for all operations' checkbox, and add all of the paths previously listed- Repeat as above on the 'Target applications' tabs- Click 'OK'- On the 'ESET Configuration Editor' page, save the policy using the 'Save' icon

- Your ESET AV exclusions have now been fully added.



1.2 Kaspersky Security CentrePlease follow the steps below in order to add the AV exceptions required for running Impero into your Kaspersky Security CentreAnti-Virus system.

- Open your Kaspersky Security Centre- Select the group in which the Impero Client machines belong. For the purpose of this example, the group is 'Managed Computers'- In the right-hand panel, select the 'Policies' tab (Image 2)

Image 2 - Kaspersky Security Centre

- Double-click on the AV policy. For the purpose of this example, the policy is 'Workstations'- On the policy 'Properties' page, under 'Anti-Virus protection', select 'General Protection Settings'- In the right-hand panel, under 'Exclusions and Trusted Zone', select 'Settings' (Image 2.1)

Image 2.1 - Properties



- This will open the 'Exclusion rules' tab on the 'Trusted zones' window- Click on 'Add' to open the 'Exclusion rule' window- Ensure the 'Protection components' setting is set to 'any'- Click 'select file or folder...'- This will open the 'Name of file or folder' window (Image 2.2)

Image 2.2 - Name of File or Folder

- Add the following as folders:

C:\ProgramFiles\Impero Solutions Ltd\C:\ProgramFiles (x86)\Impero Solutions Ltd\C:\ProgramFiles\GFI\LanGuard 11 Agent\C:\ProgramFiles (x86)\GFI\LanGuard 11 Agent\

- Ensure that 'Include subfolders' is ticked for all of these- Once these are added, click the 'Trusted Applications' tab at the top of the 'Trusted zone' window (Image 2.3)

Image 2.3 - Trusted Applications



- Click 'Add'- Add the following, ensuring all options except for 'Allow interaction with application interface' are selected


C:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Client\imperoclient.exe C:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Client\ImperoClientSVC.exeC:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Client\ImperoConsoleShortcut.exeC:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Client\ImperoControlLibrary.dllC:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Client\ImperoGuardianSVC.exe C:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Client\ImperoKInit.exe C:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Client\ImperoServerBrowser.exe C:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Client\ImperoUtilities.exe C:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Client\ImperoWinlogonApplication.exe C:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Client\NRControlViewer.dllC:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Server\ImperoServer.exe C:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Server\ImperoServerSVC.exeC:\ProgramFiles (x86)\Impero Solutions Ltd\Impero Server\ImperoGuardianSVC.exeC:\ProgramFiles (x86)\GFI\LanGuard 11 Agent\httpd.exeC:\ProgramFiles (x86)\GFI\LanGuard 11 Agent\lnssatt.exeC:\ProgramFiles (x86)\GFI\LanGuard 11 Agent\lnsscomm.exeC:\ProgramFiles (x86)\GFI\LanGuard 11 Agent\mantle.exeC:\ProgramFiles (x86)\GFI\LanGuard 11 Agent\update.exe

- Once added, click on 'OK' until you return to the policy 'Properties' window- Click on 'Apply' and then 'OK'

- Your Kaspersky Security Centre AV exclusions have now been fully added.



1.3 McAfee VirusScan EnterprisePlease follow the steps below in order to add the AV exceptions required for running Impero into your McAfee VirusScan Enterprisewith ePolicy Orchestrator 5.1 Anti-Virus system.

- Open your ePolicy Console and log in- Click on the System Tree in the top banner menu (Image 3)

Image 3 - McAfee VirusScan Enterprise

- In the left-hand panel, select the group which the client machines are a member of, or 'My Organization' followed by 'AssignedPolicies' in the menu above the computer list (Image 3.1)

Image 3.1 - Assigned Policies

- In the 'Product' drop-down list, select 'VirusScan Enterprise'- This will open the list of policies (Image 3.2)



Image 3.2 - Policies

- Select the policy in the 'On-Access Default Processes' category- This will open the policy editing page- Select 'Exclusions'from the menu- Notice that the 'Settings for' drop-down list is set to 'Workstation' (Image 3.3)- If this policy applies to both workstations and servers, you will have the add the exclusions twice - once for 'Workstations' andagain for 'Servers'

Image 3.3 - Exclusions

- Uncheck the 'How to handle client exclusions' box- Click on 'Add' to open the 'Add/Edit Exclusion Item' window (Image 3.4)



Image 3.4 - Add/Edit Exclusion

- When adding these the following items, ensure 'Also exclude subfolders' is checked each time


- Once added, click 'Save' in the bottom right corner- This will take you back to the policy selection screen

- If this policy also applies to the Impero Server, reopen the policy and change the 'Settings for' drop-down list to 'Server' and addthe exclusions again- If not, find the container in the left-hand panel which contains the Impero Server- Select that container and carry out the following steps for the policies that apply specifically to the Impero Server

- Back on the policy page, select the 'Unwanted Programs Policy' (Image 3.5)

Image 3.5 - Unwanted Programs Policy

- Add the following items:

imperoclient.exe NRControlViewer.dllImperoClientSVC.exe ImperoServer.exeImperoConsoleShortcut.exe ImperoServerSVC.exeImperoControlLibrary.dll httpd.exeImperoGuardianSVC.exe lnssatt.exeImperoKInit.exe lnsscomm.exeImperoServerBrowser.exe mantle.exeImperoUtilities.exe update.exeImperoWinlogonApplication.exe



- Click 'Save' in the bottom right corner- Select the same policy again, and change the drop-down list to 'Server'- Add the above list again, and then click 'Save'

- Your McAfee VirusScan Enterprise with ePolicy Orchestrator AV exclusions have now been fully added.



1.4 Microsoft ForefrontPlease follow the steps below in order to add the AV exceptions required for running Impero into your Microsoft Forefront Anti-Virus system.

- Open Microsoft Forefront- Select 'Policy Management'- Select a policy- Click on 'Edit'- Select 'Advanced' (Image 4)

Image 4 - Microsoft Forefront

- You can add the exclusions under 'Exclusions from malware scans'- You can only add one exclusion at a time- Enter all the file and folder paths as detailed below- Once the path is entered, click on 'Add'

C:\Program Files\Impero Solutions Ltd\Impero Client\imperoclient.exe C:\Program Files\Impero Solutions Ltd\Impero Client\ImperoClientSVC.exeC:\Program Files\Impero Solutions Ltd\Impero Client\ImperoConsoleShortcut.exe C:\Program Files\Impero Solutions Ltd\Impero Client\ImperoControlLibrary.dllC:\Program Files\Impero Solutions Ltd\Impero Client\ImperoGuardianSVC.exe C:\Program Files\Impero Solutions Ltd\Impero Client\ImperoKInit.exe C:\Program Files\Impero Solutions Ltd\Impero Client\ImperoServerBrowser.exe C:\Program Files\Impero Solutions Ltd\Impero Client\ImperoUtilities.exe C:\Program Files\Impero Solutions Ltd\Impero Client\ImperoWinlogonApplication.exe C:\Program Files\Impero Solutions Ltd\Impero Client\NRControlViewer.dllC:\Program Files\Impero Solutions Ltd\Impero Server\ImperoServer.exe C:\Program Files\Impero Solutions Ltd\Impero Server\ImperoServerSVC.exeC:\Program Files\Impero Solutions Ltd\Impero Server\ImperoGuardianSVC.exeC:\Program Files\GFI\LanGuard 11 Agent\httpd.exe



C:\Program Files\GFI\LanGuard 11 Agent\lnssatt.exeC:\Program Files\GFI\LanGuard 11 Agent\lnsscomm.exeC:\Program Files\GFI\LanGuard 11 Agent\mantle.exeC:\Program Files\GFI\LanGuard 11 Agent\update.exe

C:\Program Files (x86)\Impero Solutions Ltd\Impero Client\imperoclient.exe C:\Program Files (x86)\Impero Solutions Ltd\Impero Client\ImperoClientSVC.exeC:\Program Files (x86)\Impero Solutions Ltd\Impero Client\ImperoConsoleShortcut.exeC:\Program Files (x86)\Impero Solutions Ltd\Impero Client\ImperoControlLibrary.dllC:\Program Files (x86)\Impero Solutions Ltd\Impero Client\ImperoGuardianSVC.exe C:\Program Files (x86)\Impero Solutions Ltd\Impero Client\ImperoKInit.exe C:\Program Files (x86)\Impero Solutions Ltd\Impero Client\ImperoServerBrowser.exe C:\Program Files (x86)\Impero Solutions Ltd\Impero Client\ImperoUtilities.exe C:\Program Files (x86)\Impero Solutions Ltd\Impero Client\ImperoWinlogonApplication.exe C:\Program Files (x86)\Impero Solutions Ltd\Impero Client\NRControlViewer.dllC:\Program Files (x86)\Impero Solutions Ltd\Impero Server\ImperoServer.exe C:\Program Files (x86)\Impero Solutions Ltd\Impero Server\ImperoServerSVC.exeC:\Program Files (x86)\Impero Solutions Ltd\Impero Server\ImperoGuardianSVC.exeC:\Program Files (x86)\GFI\LanGuard 11 Agent\httpd.exeC:\Program Files (x86)\GFI\LanGuard 11 Agent\lnssatt.exeC:\Program Files (x86)\GFI\LanGuard 11 Agent\lnsscomm.exeC:\Program Files (x86)\GFI\LanGuard 11 Agent\mantle.exeC:\Program Files (x86)\GFI\LanGuard 11 Agent\update.exe

- Your Microsoft Forefront AV exclusions have now been fully added.



1.5 Sophos EnterprisePlease follow the steps below in order to add the AV exceptions required for running Impero into your Sophos Enterprise Anti-Virussystem.

- Open your Sophos Enterprise Console (Image 5)

Image 5 - Sophos Enterprise Console

- Select the group(s) in which the Impero Client machines will belong from the 'Groups' tab- Expand the 'Anti-Virus and HIPS Policies' tab- Select the policy which applies to the machines (Usually, this is 'Default')- Double-click the policy, or right-click and select 'View/Edit Policy' from the contextual menu- This will open the 'Anti-Virus and HIPS' window (Image 5.1)

Image 5.1 - Anti-Virus and HIPS Policy

- In this window, click on 'Authorization...' - The default tab that opens is 'Adware and PUAs' (Image 5.1)



- Click the 'New entry' button and add the entries listed below:

imperoclient.exe NRControlViewer.dllImperoClientSVC.exe ImperoServer.exe ImperoConsoleShortcut.exe ImperoServerSVC.exeImperoControlLibrary.dll httpd.exeImperoGuardianSVC.exe lnssatt.exeImperoKInit.exe lnsscomm.exeImperoServerBrowser.exe mantle.exeImperoUtilities.exe update.exeImperoWinlogonApplication.exe

- Once added, click the 'OK' button- This will close the window and take you back to the 'Anti-Virus and HIPS' policy editing window- Select the 'Configure' button next to 'Enable on-access scanning'- This will open the 'On-access scan settings' window (Image 5.2)

Image 5.2 - On-access scan settings

- Select the 'Windows Exclusions' tab- Add the following folders:


- Add the following as files (Image 5.3):




Image 5.3 - Excluded Items

- Click on 'OK' once they are added- Re-open this window and use the 'Export...' button to export the settings to a file- From the 'Anti-Virus and HIPS' window, click on 'Extension and Exclusions > Windows Exclusions' and import the file yousaved, or re-enter the list- Click on 'OK', then 'OK', and 'OK' again on the pop-up windows to apply the policy to the client machines- Repeat the above on all groups/policies that include machines with the Impero Client installed to them

- Your Sophos Enterprise AV exclusions have now been fully added.



1.6 Symantec Endpoint ProtectionPlease follow the steps below in order to add the AV exceptions required for running Impero into your Symantec EndpointProtection Anti-Virus system.

- Log in to your Symantec Endpoint Protection Manager (Image 6)

Image 6 - Symantec Endpoint Protection Manager

- In the left-hand menu, click on 'Policies > Exceptions > Exceptions Policies' (Image 6.1)

Image 6.1 - Exceptions Policies

- Click on 'Edit the policy' from the left-hand menu, or double-click on the policy itself- This will open the 'Overview' tab (Image 6.2)



Image 6.2 - Overview- Ensure that 'Enable this policy' is ticked- Open the 'Exceptions' section via the left-hand menu- Select 'Add > Windows Exceptions > Folder' (Image 6.3)

Image 6.3 - Exceptions

- In the 'Add Folder Exception' window, set 'Prefix variable' to '[NONE]'- Set 'Specify the type of scan that excludes this folder' to 'All' (Image 6.4)



Image 6.4 - Folder Exception

- Do this for the following folders:


- Once added, add the following as files in the same manner (Image 6.5)

C:\Program Files\Impero Solutions Ltd\Impero Client\imperoclient.exe C:\Program Files\Impero Solutions Ltd\Impero Client\ImperoClientSVC.exeC:\Program Files\Impero Solutions Ltd\Impero Client\ImperoConsoleShortcut.exe C:\Program Files\Impero Solutions Ltd\Impero Client\ImperoControlLibrary.dllC:\Program Files\Impero Solutions Ltd\Impero Client\ImperoGuardianSVC.exe C:\Program Files\Impero Solutions Ltd\Impero Client\ImperoKInit.exe C:\Program Files\Impero Solutions Ltd\Impero Client\ImperoServerBrowser.exe C:\Program Files\Impero Solutions Ltd\Impero Client\ImperoUtilities.exe C:\Program Files\Impero Solutions Ltd\Impero Client\ImperoWinlogonApplication.exe C:\Program Files\Impero Solutions Ltd\Impero Client\NRControlViewer.dllC:\Program Files\Impero Solutions Ltd\Impero Server\ImperoServer.exe C:\Program Files\Impero Solutions Ltd\Impero Server\ImperoServerSVC.exeC:\Program Files\Impero Solutions Ltd\Impero Server\ImperoGuardianSVC.exeC:\Program Files\GFI\LanGuard 11 Agent\httpd.exeC:\Program Files\GFI\LanGuard 11 Agent\lnssatt.exeC:\Program Files\GFI\LanGuard 11 Agent\lnsscomm.exeC:\Program Files\GFI\LanGuard 11 Agent\mantle.exeC:\Program Files\GFI\LanGuard 11 Agent\update.exe

C:\Program Files (x86)\Impero Solutions Ltd\Impero Client\imperoclient.exe C:\Program Files (x86)\Impero Solutions Ltd\Impero Client\ImperoClientSVC.exeC:\Program Files (x86)\Impero Solutions Ltd\Impero Client\ImperoConsoleShortcut.exeC:\Program Files (x86)\Impero Solutions Ltd\Impero Client\ImperoControlLibrary.dllC:\Program Files (x86)\Impero Solutions Ltd\Impero Client\ImperoGuardianSVC.exe C:\Program Files (x86)\Impero Solutions Ltd\Impero Client\ImperoKInit.exe C:\Program Files (x86)\Impero Solutions Ltd\Impero Client\ImperoServerBrowser.exe C:\Program Files (x86)\Impero Solutions Ltd\Impero Client\ImperoUtilities.exe C:\Program Files (x86)\Impero Solutions Ltd\Impero Client\ImperoWinlogonApplication.exe C:\Program Files (x86)\Impero Solutions Ltd\Impero Client\NRControlViewer.dllC:\Program Files (x86)\Impero Solutions Ltd\Impero Server\ImperoServer.exe C:\Program Files (x86)\Impero Solutions Ltd\Impero Server\ImperoServerSVC.exeC:\Program Files (x86)\Impero Solutions Ltd\Impero Server\ImperoGuardianSVC.exeC:\Program Files (x86)\GFI\LanGuard 11 Agent\httpd.exeC:\Program Files (x86)\GFI\LanGuard 11 Agent\lnssatt.exeC:\Program Files (x86)\GFI\LanGuard 11 Agent\lnsscomm.exeC:\Program Files (x86)\GFI\LanGuard 11 Agent\mantle.exeC:\Program Files (x86)\GFI\LanGuard 11 Agent\update.exe



Image 6.5 - File Exception

- Once added, click 'Add' again and navigate to 'Windows Exceptions > Tamper Protection Exception' (Image 6.6)

Image 6.6 - Tamper Protection Exception

- This will open the 'Tamper Protection Exception' window (Image 6.7)

Image 6.7 - Add Tamper Protection Exception

- Leave the 'Prefix variable' set to '[NONE]' and add the entries as previously listed- The usual required exceptions are now all added

- If you currently use 'Application Monitoring', you may want to add the executables by selecting 'Application' from the 'WindowsException' list- Set the 'Action:' drop-down to 'Ignore' (you may need to come back to this as it may take several hours for the application toappear in the 'Application Exceptions' list)



- Select 'Add an Application to Monitor' an enter the executable names as previously listed (Image 6.8)

Image 6.8 - Add Application Exception

- Your Symantec Endpoint Protection AV exclusions have now been fully added.



1.7 Trend Micro OfficeScanPlease follow the steps below in order to add the AV exceptions required for running Impero into your Trend Micro OfficeScanAnti-Virus system.

- Open your Trend Micro OfficeScan Server Web Console and log in- On the Console, open 'Networked Computers'- Select 'Client Management'- Highlight the OfficeScan Server, and click on 'Settings'- Select 'Scan Settings > Real-time Scan Settings' (Image 7)

Image 7 - Trend Micro OfficeScan

- This will open the 'Real-time scan settings' window (Image 7.1)



Image 7.1- In this window, find the 'Scan Exclusion List (Directories)'- Just above this, tick the 'Apply scan exclusion settings to all scan types' checkbox- Select the 'Adds path to the client computer's exclusion list' checkbox- Add the following entries:

C:\Program Files\Impero Solutions Ltd\C:\Program Files (x86)\Impero Solutions Ltd\C:\Program Files\GFI\LanGuard 11 Agent\



C:\Program Files (x86)\GFI\LanGuard 11 Agent\

- Now find the 'Scan Exclusion List (Files)' section of the window- Select the 'Adds path to the client computer's exclusions list'- Add the following entries:


- Click on 'Apply to All Clients'

- To add the programs to the 'Behaviour Monitoring' aspect of OfficeScan, select 'Settings > Behaviour MonitoringSettings' (Image 7.2)

Image 7.2 - Client Management

- On the 'Behaviour Monitoring' window, scroll down to the 'Exceptions' window and enter the following programs with the fullpath (Image 7.3):

C:\Program Files\Impero Solutions Ltd\Impero Client\imperoclient.exe C:\Program Files\Impero Solutions Ltd\Impero Client\ImperoClientSVC.exeC:\Program Files\Impero Solutions Ltd\Impero Client\ImperoConsoleShortcut.exe C:\Program Files\Impero Solutions Ltd\Impero Client\ImperoGuardianSVC.exe C:\Program Files\Impero Solutions Ltd\Impero Client\ImperoKInit.exe C:\Program Files\Impero Solutions Ltd\Impero Client\ImperoServerBrowser.exe C:\Program Files\Impero Solutions Ltd\Impero Client\ImperoUtilities.exe C:\Program Files\Impero Solutions Ltd\Impero Client\ImperoWinlogonApplication.exe C:\Program Files\Impero Solutions Ltd\Impero Server\ImperoServer.exe C:\Program Files\Impero Solutions Ltd\Impero Server\ImperoServerSVC.exeC:\Program Files\Impero Solutions Ltd\Impero Server\ImperoGuardianSVC.exeC:\Program Files\GFI\LanGuard 11 Agent\httpd.exe



C:\Program Files\GFI\LanGuard 11 Agent\lnssatt.exeC:\Program Files\GFI\LanGuard 11 Agent\lnsscomm.exeC:\Program Files\GFI\LanGuard 11 Agent\mantle.exeC:\Program Files\GFI\LanGuard 11 Agent\update.exe

C:\Program Files (x86)\Impero Solutions Ltd\Impero Client\imperoclient.exe C:\Program Files (x86)\Impero Solutions Ltd\Impero Client\ImperoClientSVC.exeC:\Program Files (x86)\Impero Solutions Ltd\Impero Client\ImperoConsoleShortcut.exeC:\Program Files (x86)\Impero Solutions Ltd\Impero Client\ImperoGuardianSVC.exe C:\Program Files (x86)\Impero Solutions Ltd\Impero Client\ImperoKInit.exe C:\Program Files (x86)\Impero Solutions Ltd\Impero Client\ImperoServerBrowser.exe C:\Program Files (x86)\Impero Solutions Ltd\Impero Client\ImperoUtilities.exe C:\Program Files (x86)\Impero Solutions Ltd\Impero Client\ImperoWinlogonApplication.exe C:\Program Files (x86)\Impero Solutions Ltd\Impero Server\ImperoServer.exe C:\Program Files (x86)\Impero Solutions Ltd\Impero Server\ImperoServerSVC.exeC:\Program Files (x86)\Impero Solutions Ltd\Impero Server\ImperoGuardianSVC.exeC:\Program Files (x86)\GFI\LanGuard 11 Agent\httpd.exeC:\Program Files (x86)\GFI\LanGuard 11 Agent\lnssatt.exeC:\Program Files (x86)\GFI\LanGuard 11 Agent\lnsscomm.exeC:\Program Files (x86)\GFI\LanGuard 11 Agent\mantle.exeC:\Program Files (x86)\GFI\LanGuard 11 Agent\update.exe

Image 7.3 - Behaviour Monitoring Settings

- Your Trend Micro OfficeScan AV exclusions have now been fully added.



1.8 Vipre Business PremiumPlease follow the steps below in order to add the AV exceptions required for running Impero into your Vipre Business PremiumAnti-Virus system.

- Open your Vipre Business Premium Console, usually located on the AV server (Image 8)

Image 8 - Vipre Business Premium Console- You will need to edit the policies which apply to the Impero Clients and Impero Server machines- Select the policy in the 'Site Navigator'- Click on 'Policy Properties' in the top menu (Image 8.1)

Image 8.1 - Policy Properties

- Now expand 'Exceptions > Exclusions' (Image 8.2)



Image 8.3 - Exclusions- Click on 'Add'- Add the following entries as Files:

imperoclient.exe NRControlViewer.dllImperoClientSVC.exe ImperoServer.exe ImperoConsoleShortcut.exe ImperoServerSVC.exeImperoControlLibrary.dll httpd.exeImperoGuardianSVC.exe lnssatt.exeImperoKInit.exe lnsscomm.exeImperoServerBrowser.exe mantle.exeImperoUtilities.exe update.exeImperoWinlogonApplication.exe

- Add the following entries as Folders:


- Now expand 'Firewall > Basic Firewall Protection > Application Exceptions' in the left-hand panel- Click on 'Add'- Add the same files as previously listed (Image 8.3)



Image 8.3 - Application Exceptions

- Once added, click on 'Apply'

- Your Vipre Business Premium AV exclusions have now been fully added.

impero anti-virus exclusionscdn.imperosoftware.com/knowledgebase/edupro/manuals/antivirus... ·...

Documents