Microsoft Defender ATP - exclude network volumes

dlondon
Contributor III

Just wondering if anyone knows how to configure Defender to exclude network volumes.

1) One of ours mounts as "data" which is a pretty generic name.  So for example I could exclude /Volumes/data for that but I worry that I may be excluding a thumb drive called "data" if I do that.  Our network file servers have their own AV so the clients don't need to scan them as well.

2) Another server has a share for each user of that server so many hundreds of shares.  Those shares keep getting added to so explicitly naming them all is a bit of a nightmare.  Again, the server has its own AV so doesn't need a bunch of clients scanning it as well.

How do other people handle these situations?

0 REPLIES 0