Page 1 of 1

Antivirus Exclusions

Posted: Thu Jun 03, 2021 4:46 am
by andyb4u
Hi. I have a couple of questions regards antivirus on the Nagios XI server:

Are there certain things (processes \ folders \ files) on the Nagios XI server that should be excluded from antivirus protection?

Are there are any known issues running Sophos on the Nagios XI server?

Re: Antivirus Exclusions

Posted: Thu Jun 03, 2021 9:48 am
by gsmith
Hi,

We haven't had any reports of problems due to Sophos.

There isn't anything Nagios related that needs to be excluded from
anti-virus software.

Is there anything else that you need help with?

Thanks

Re: Antivirus Exclusions

Posted: Fri Jun 04, 2021 1:41 am
by tony
Are there no best practices around anti virus exclusions for Nagios?

Foe example when running active checks exclude the libexec directory as it contains the plugins, the nrpe daemon etc..

Re: Antivirus Exclusions

Posted: Fri Jun 04, 2021 10:20 am
by benjaminsmith
Hi Tony,

We have a general guide on the ports and protocols used by Nagios XI to assist with configuration.

Nagios XI Ports and Protocals

We usually recommend leveraging a test server in these cases to determine the impact of the application and then working with your security team on the proper settings. With each Nagios XI license, 3 activations are allowed: production, test, and backup. For situations like this, it's really beneficial to test out any changes or upgrades, before deploying them to the production instance.

Regards,
Benjamin

Re: Antivirus Exclusions

Posted: Thu Jun 10, 2021 1:50 am
by tony
Benjamin

That did not answer my query regarding are there any best practices for anti virus exclusions

Re: Antivirus Exclusions

Posted: Thu Jun 10, 2021 10:26 am
by benjaminsmith
Hi Tony,

While we are not experts in Sophos, I'd be happy to answer any product-specific questions you have on getting this set up in your environment. My recommendation would be to set a test instance and then try to work out any issues by adding exclusions as necessary. We currently do not maintain official guides on how to set up third-party Antivirus applications in Nagios XI.

The two main installation directories for Nagios XI are below.

Code: Select all

/usr/local/nagios/
/usr/local/nagiosxi/
Best Regards,
Benajmin