Submit a ticketCall us

Solarwinds & Cisco Live! Barcelona
Join us from the 29th of January to the 2nd of February at Cisco Live 2018 in Barcelona, where we will continue to show how monitoring the network with SolarWinds will keep you ahead of the game. At our booth (WEP 1A), we will demonstrate how SolarWinds network solutions can help. As a bonus, we are also hosting a pre-event webinar - Blame the Network, Hybrid IT Edition with our SolarWinds Head Geek™, Patrick Hubbard on January 24th - GMT (UTC+0): 10:00 a.m. to 11:00 a.m. There's still time to RSVP.

Home > Success Center > Server & Application Monitor (SAM) > SAM 6.5 Administrator Guide > Security enhancements and exceptions in SAM > Antivirus directory exclusions for SAM

Antivirus directory exclusions for SAM

Updated: 3-9-2017

To run SolarWinds products you may need to exclude certain directories and ports from your antivirus software and add service accounts. You can also review antivirus exclusions for all Orion products in this article.

Directories

Ensure that SAM has access to all required files by excluding the following directories from antivirus protection.

  • Do not exclude executable files.
  • SolarWinds assumes that C:\ is the default install volume.

Orion server

  • C:\Inetpub\SolarWinds\
  • C:\ProgramData\SolarWinds\
  • C:\Program Files (x86)\Common Files\SolarWinds\
  • C:\Program Files (x86)\Microsoft SQL Server\
  • C:\Program Files (x86)\SolarWinds\
  • C:\Windows\Temp\SolarWinds\
  • C:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files
  • C:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files
  • C:\Windows\Microsoft.NET\Framework64\v2.0.50727\Temporary ASP.NET Files
  • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files

If you are using NetFlow Traffic Analyzer, also exclude also the NTA Flow Storage Database directory and the appropriate backup directory from the antivirus protection.

SQL Server

  • C:\Program Files\Microsoft SQL Server\
  • C:\Program Files (x86)\Microsoft SQL Server\

Ports

  • 80/TCP - IIS web
  • 161/UDP - SNMP
  • 162/UDP - SNMP
  • 1433/TCP - MS SQL
  • 1434/TCP MS SQL
  • 17777/TCP - SolarWinds Information Service

Service Accounts

The following are LOCAL accounts and not domain. Verify that the Location is changed to ServerName (not your domain) in the AD box.

  • NETWORK SERVICE
  • IUSR
  • Authenticated Users
 
Last modified

Tags

Classifications

Public