Antivirus exclusions

70 users found this article helpful

Overview

In some cases, security software may negatively affect the performance of a Parallels Remote Application Server (RAS) environment. This can result in slowdowns or prevent published applications and desktops from launching.

Symptoms

Resolution

To ensure optimal performance and compatibility, Parallels recommends excluding specific folders and processes from real-time or on-access scanning. These items should instead be scanned periodically using scheduled scans. Additionally, monitor the creation of new files within the excluded directories.

Recommended Exclusions

On RAS Servers

%ProgramFiles(x86)%\Parallels\ApplicationServer
%WINDIR%\System32\Memshell.exe
%ProgramData%\Parallels\RASLogs

On Windows Client Devices

%AppData%\2XClient
%ProgramFiles%\Parallels\
%ProgramFiles(x86)%\Parallels\

Sophos Antivirus Configuration

To maintain compatibility with Sophos Antivirus, configure the following exclusions:

Global Exclusions

Exclusion Type Platform Path
Exploit Mitigation & Activity Monitoring Windows C:\Program Files (x86)\Parallels\ApplicationServer\x64\SCardCertLogonHooker.dll
Exploit Mitigation & Activity Monitoring Windows C:\Program Files (x86)\Parallels\ApplicationServer\x64\SCardHooker64.exe
Process Windows C:\Program Files (x86)\Parallels\ApplicationServer\x64\SCardHooker64.exe
Process Windows C:\Windows\System32\lass.exe
Note: Apply these exclusions in Sophos Central Admin or Enterprise Console under the appropriate policy for affected endpoints.

Was this article helpful?

Tell us how we can improve it.