What exclusions should I make on my anti-malware software to prevent disruption of the Sandbox processing?

Overview

If real-time protection (RTP) or antivirus software is running on the Sandbox host, certain exclusions should be configured to prevent interference with Sandbox processing. Adding these locations to the allowlist ensures smooth operation and avoids potential disruptions.

Folders to Add to the Allowlist

Ensure the following directories are excluded from scans in your anti-malware software:

  1. Sandbox Installation Folder

    • Default location: /home/sandbox/sandbox

  2. Docker Data Directory

    • Location: /var/lib/docker

Why These Exclusions Are Necessary

  • Prevents scanning conflicts: Real-time scanning can interfere with sandbox execution and analysis.
  • Reduces performance impact: Excluding these directories ensures that system resources are not wasted on unnecessary scans.
  • Avoids false positives: Some sandbox activities may be flagged as suspicious, leading to unintended disruptions.

Conclusion

To maintain optimal Sandbox performance, configure your anti-malware software to exclude the specified directories from real-time and scheduled scans. Doing so will prevent disruptions and ensure seamless processing.

If Further Assistance is required, please proceed to log a support case or chatting with our support engineer.
Type to search, ESC to discard
Type to search, ESC to discard
Type to search, ESC to discard
Next to read:
Do you use sandbox technology?

See the "Technical Datasheet" for a complete list of features: https://docs.opswat.com/filescan/datasheet/technical-datasheet

On This Page
What exclusions should I make on my anti-malware software to prevent disruption of the Sandbox processing?OverviewRecommended ExclusionsFolders to Add to the AllowlistWhy These Exclusions Are NecessaryConclusion