Security Team is asking me why SolarWinds recommends excluding certain directories from av scanning.
I was asked why does C:\Program Files (x86)\Microsoft SQL Server\ need to be excluded from av scans on the app server. I was also asked whether it would be ok to exclude just the solarwinds subdirectory in the NTA directory. So my NTA data is on f:\programdata\solarwinds subdirectory and I was asked whether we can exclude the scanning on f:\programdata\solarwinds subdirectory instead. I originally asked to exclude the whole f:\ directory from av scanning but this isn't the safest option. As I keep reading the list of directories to exclude it looks like I need the whole f:\ excluded.
What are your thoughts???
***The directories to exclude were listed on Antivirus directory exclusions for NPM - SolarWinds Worldwide, LLC. Help and Support ***