Guidelines for excluding Symantec Data Loss Prevention installation directories from third-party file backups
search cancel

Guidelines for excluding Symantec Data Loss Prevention installation directories from third-party file backups

book

Article ID: 172048

calendar_today

Updated On:

Products

Data Loss Prevention Network Discover

Issue/Introduction

Third-party backup applications that are installed on the Enforce Server or on detection servers might interfere with Network Discover scans if the backups occur during an ongoing scan.

This article contains guidelines for creating exclusions for the Enforce Server and detection server installation directories in third-party backup applications.  

Symantec strongly recommends you schedule backups to avoid coinciding with Network Discover scans.

Resolution

To prevent scheduled backups from interfering with ongoing scans, create exclusions for the following Symantec Data Loss Prevention installation directories on the Enforce Server and the detection servers:

Enforce Server (Linux)

  • Version 15.0 and earlier: /var/SymantecDLP/Scan

  • Version 15.1 and later: /opt/Symantec/DataLossPrevention/Enforce Server/<version>/Protect/scan

Enforce Server (Microsoft Windows)

  • Version 15.0 and earlier: C:\SymantecDLP\Protect\scan

  • Version 15.1 and later: C:\Program Files\Symantec\Data Loss Prevention\Enforce Server\<version>\Protect\scan

Detection Server (Linux)

  • Version 15.0 and earlier: /var/SymantecDLP/Scan

  • Version 15.1 and later: /opt/Symantec/DataLossPrevention/Detection Server/<version>/Protect/scan

Detection Server (Microsoft Windows)

  • Version 15.0 and earlier: C:\SymantecDLP\Protect\scan

  • Version 15.1 and later: C:\Program Files\Symantec\Data Loss Prevention\Detection Server\<version>\Protect\scan

Additional Information

You may want to refer to Best practice: DLP Servers with Backup Solutions (broadcom.com) for additional guidance.