Interoperability with McAfee

Description

To learn how to exclude files and folders please see Capture Client Interoperability Issues with Third Party Applications.

Resolution

Items to exclude:

  • See the McAfee recommendations in this article: Endpoint Security and VirusScan Enterprise exclusions for Data Loss Prevention Endpoint to improve performance

    A summary of the recommendations is to exclude these files:

    C:\ProgramData\McAfee\

    C:\Program File*\McAfee\

    C:\Program File*\Common Files\McAfee\

    C:\Windows\System32\mfevtps.exe

    C:\ProgramData\McAfeeTmpInstall_Common\

    C:\windows\TEMP\MfeEpAac.exe

    C:\WINDOWS\TEMP\*\MfeEpAac.exe

    C:\Users\*\AppData\Local\Temp\MfeEpAac_mfeprotect.exe

     

    A more detailed and granular list that is less aggressive than the summary above is

    C:\Program Files\McAfee\Endpoint Security\Endpoint Security Platform\PwdUninstall.exe

    C:\Program Files\McAfee\Endpoint Security\Threat Prevention\amcfg.exe

    C:\Program Files\McAfee\Endpoint Security\Threat Prevention\AMcore\installer.exe

    C:\Program Files\McAfee\Endpoint Security\Endpoint Security Platform\MfeVSCoreUninst.exe

    C:\Program Files (x86)\McAfee\Endpoint Security\Endpoint Security Platform\VSCore_ENS_*\*\mfehidin.exe

    C:\Program Files (x86)\McAfee\Endpoint Security\Threat Prevention\WscAVExe.exe

    C:\Program Files (x86)\McAfee\Endpoint Security\Endpoint Security Platform\MaComServer.exe

    C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe

    C:\WINDOWS\system32\mfevtps.exe

    C:\Program Files\McAfee\Endpoint Security\Endpoint Security Platform\mfeesp.exe

    C:\Program Files\McAfee\Endpoint Security\Threat Prevention\mfetp.exe

    C:\Program Files\Common Files\McAfee\SystemCore\mfecanary.exe

    C:\WINDOWS\TEMP\*\MfeEpAac.exe

    C:\Program Files\McAfee\Agent\x86\McScript_InUse.exe

    C:\Program Files\Common Files\McAfee\SystemCore\EntVUtil.EXE

    C:\Program Files (x86)\McAfee\VirusScan Enterprise\x64\scan64.exe

    C:\Program Files (x86)\Common Files\McAfee\DATReputation\mcdatrep.exe

    C:\Program Files\McAfee\Agent\x86\McScanCheck.exe

    C:\Program Files (x86)\McAfee\VirusScan Enterprise\mfeann.exe

    C:\Program Files\McAfee\Agent\macmnsvc.exe

    C:\Program Files\McAfee\Agent\masvc.exe

    C:\Program Files (x86)\McAfee\VirusScan Enterprise\VsTskMgr.exe

    C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe

    C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe

    C:\Program Files\McAfee\Agent\x86\macompatsvc.exe

    C:\Program Files\McAfee\Agent\x86\mfemactl.exe

    C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe

    C:\Program Files (x86)\McAfee\VirusScan Enterprise\shstat.exe

    C:\Program Files (x86)\McAfee\VirusScan Enterprise\mfeann.exe

    C:\Program Files (x86)\McAfee\VirusScan Enterprise\VsTskMgr.exe

    C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe

    C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe

    C:\Program Files (x86)\McAfee\VirusScan Enterprise\x64\scan64.exe

    C:\Program Files (x86)\McAfee\VirusScan Enterprise\shstat.exe

To exclude SentinelOne from McAfee:

  1. Exclude these folders and the update file:

    • C:\Program Files\SentinelOne

    • C:\ProgramData\Sentinel

    • C:\Documents and Settings\All Users\Application Data\Sentinel (ProgramData for 2003 and legacy agents )

    • C:\Windows\Temp\SentinelInstaller.exe

    Note: Make sure to exclude subfolders. Some solutions automatically exclude subfolders, but others require explicit notation.

  2. Exclude the SentinelOne Agent kernel-mode driver, service, and dynamic library:

    • Kernel-Mode driver: SentinelMonitor.sys

    • Windows Service: SentinelAgent.exe

    • 32-bit DLL: InProcessClient32.dll

    • 64-bit DLL: InProcessClient64.dll

Related Articles

  • How to uninstall Capture Client and Sentinel One?
    Read More
  • How to run Capture Client clean up tool
    Read More
  • ConnectWise Manage (Legacy) Integration - Frequently Asked Questions
    Read More
not finding your answers?
was this article helpful?