Arc ATP SQL server

Question

Do AV exclusions need applying when using Azure arc ATP for SQL server on prem?

Answer 1

Hello Emma Dolling

When using Azure Arc ATP (Advanced Threat Protection) for SQL Server on-premises, it is generally recommended to apply antivirus (AV) exclusions to ensure optimal performance and compatibility. AV exclusions help prevent interference between the antivirus software and the Azure Arc ATP agent, avoiding potential performance issues or false positives.

While the specific AV exclusions may vary depending on the antivirus solution you are using, here are some general guidelines:

File-level exclusions: Exclude specific directories or files related to the Azure Arc ATP agent and SQL Server from being scanned by the antivirus software. These exclusions typically include the installation directory, log files, and any temporary or working directories used by the agent and SQL Server.

Process-level exclusions: Exclude the processes associated with the Azure Arc ATP agent and SQL Server from active scanning. This helps prevent performance degradation by reducing the overhead of scanning these processes.

Network exclusions: Configure exclusions for network traffic monitoring or scanning by the antivirus software. This ensures that network communication between the Azure Arc ATP agent and the Azure cloud infrastructure is not disrupted or slowed down.

It's important to consult the documentation or support resources provided by your specific antivirus solution to obtain detailed instructions on configuring AV exclusions. The recommended exclusions may vary based on the antivirus product version, deployment environment, and other factors.

Additionally, periodically review the documentation and guidance provided by Microsoft for Azure Arc ATP for SQL Server on-premises to stay up to date with any specific recommendations or best practices related to AV exclusions.

By applying the appropriate AV exclusions, you can help ensure that Azure Arc ATP for SQL Server on-premises functions effectively and efficiently without any interference from the antivirus software.