how to deploy symantec endpoint protection 14

I will run a ProcMon to confirm if any additional processes appear. Where is the GXHSMService.ex process contained? I searched the server but could not find it. I will request the additional ones to be added. Then I see that the list of processes that you mention is under the McAfee and Windows Defender sections and not SEP. How should the minifilter drivers be treated if any is above the cvmhsm driver? If that doesnt help, maybe run a ProcMon capture and recall a file and see what events come up in the output. GXHSMService.ex (Ensure that the extension is ‘.EX’).In terms of Commvault processes to exclude from AV Scan, Try the following: Should the driver process also be configured as exclusions within AV or is the addition of them in the registry fine?ĭid you select the Skip Offline Files option in Scan Options? from the documentation: Symantec® Endpoint Security v12xAV Settings for Windows File Archiver ()Ĭan you check the altitudes of the minifilter drivers? - Use “fltmc” from an Admin CMD window.

Could there be any native Windows process involved in this process that might have a read operation during the recall process? Maybe the the filter drivers that need to be added to the exclusions as well? I have added several processes to the cvmhsm registry key as ExcludedProcessX. The only method that allows for stub recalls to work successfully is by configuring the AV On-Access scanner to not scan for Read operations in the folder where the stub is located.Ĭan someone please assist in clarifying exactly what processes are involved with the recall of files? I can see cvd.exe, cvods.exe and clmgrs.exe popping up from a Commvault point of view. When disabling SEP completely the recalls work successfully.īy configuring and adding all process and folders to the AV exclusion list does not resolve the problem. I have somewhat discussed this topic in the below post that has not clearly answered / resolved my issue.

How to deploy symantec endpoint protection 14