New Technical Paper: Considerations for configuring antivirus software for ArcGIS Enterprise hosts

[RandallWilliams]

Esri Software Security and Privacy has recently released a new technical paper:

Considerations for configuring antivirus software for ArcGIS Enterprise hosts

This document augments the existing kB: FAQ: Which ArcGIS Enterprise directories should be excluded for security or antivirus software? And is a valuable resource for teams installing, configuring, and administering ArcGIS Enterprise

Hosted in the customer only section of the ArcGIS Trust Center documents repository, this paper dives deep into:

• Defining Risk Factors that influence virus scanning decisions
• Differentiating between Anti-Virus tools and methods
• Describing workflows where virus scanning activities should be relaxed
• Identifying files, directories, and processes to exclude from active scans

[DrewDowling]

@RandallWilliams Is there a link to this document? I'm not seeing it and I searched the Trust center for the paper name and nothing is showing up.

'

[NicholasEverdell]

@DrewDowling - I found it in here - Secure Documents | ArcGIS Trust Center | Documentation

[BaileyBellavance]

Neither of these links work to access these articles, and I can't find it in the knowledge base. Can you please re-share these?

[DrewDowling]

@BaileyBellavanceThe document seems to have been moved to the "Customer Documents" section.

Try this link. I think you need to be logged in with an AGOL account.

https://trust.arcgis.com/en/customer-documents/ArcGIS_Enterprise_AV_Guidance.pdf

[chriscothran1]

None of these links appear to work now, and I don't see a document listing antivirus software exclusions for ESRI Enterprise solutions.

[RandallWilliams]

Link changed w/ version 3.1:

https://trust.arcgis.com/en/customer-documents/ArcGIS_Vulnerability_Scanning_Guidance_v31.pdf

Check out the other resources in the customer exclusive area of the ArcGIS Trust Center. You may also find the WAF guide helpful. 

[chriscothran1]

@RandallWilliams Sir,  I don't see anything in that pdf listing exclusions for antivirus software.  Your original post in 2020 references a document and a KB that addressed what should be ignored by antivirus software.  Those documents seem to have been removed, and searches within ESRI's documentation have not produced relevant findings for me.  Thanks for your time. 

Respectfully, Chris

[RandallWilliams]

OOPS, I'm forever tranposing the vuln scan guidnce and the AV guidance and the link is indeed broken.

I'll work with our doc team to get this fixed. 

[Leighton]

@RandallWilliams Any update on this? I have urls that used to contain this info, they no longer work: https://support.esri.com/en-us/knowledge-base/000015732 and https://support.esri.com/en/technical-article/000015732. Not sure if that helps your work with the doc team?

[RandallWilliams]

There is an updated version in the customer exclusive documents repository in the ArcGIS Trust Center. 

https://trust.arcgis.com/en/customer-documents/

[JeffClough]

Hi @RandallWilliams , I'm not able to locate this updated document after logging into the trust center and performing a search.  Can you please post a direct link?

And, of course I found the document just after posting the above.  Please disregard.

[RandallWilliams]

No worries, here's the link:

https://trust.arcgis.com/en/customer-documents/ArcGIS_Enterprise_AV_Guidance.pdf