Contents

Introduction

AMP for Endpoints Linux Connectors exclusions in Sophos 9.14.0 on CentOS 7.4.1708

Introduction

Some antivirus products need to be configured to be compatible with AMP for Endpoints Linux Connector.

AMP for Endpoints Linux Connectors exclusions in Sophos 9.14.0 on CentOS 7.4.1708

1. Configure Sophos to use fanotify for filesystem monitoring (Sophos KB118216).

2. Configure Sophos to exclude /opt/cisco/amp and all sub-directories from scanning.

3. Configure AMP for Endpoints to exclude the following directories and sub-directories (see Create and Manage Exclusions):

- /opt/sophos-av

- Sophos quarantine directory