針對代理程式和元件設定防毒程式排除項目Configuring antivirus exclusions for agent and components

重要

已不再支援此版本的 Operations Manager,建議升級至 Operations Manager 2019This version of Operations Manager has reached the end of support, we recommend you to upgrade to Operations Manager 2019.

本文概述與 System Center - Operations Manager 的相關防毒程式排除項目。This article outlines antivirus exclusions as they pertain to System Center - Operations Manager. 如需適用於舊版 Operations Manager 的相關內容,請參閱針對防毒程式排除項目的建議 (機器翻譯)。For earlier versions of Operations Manager, see Recommendations for antivirus exclusions.

如需 SQL Server 支援版本的特定排除建議,請參閱 KB309422For specific exclusion recommendations for supported versions of SQL Server, see KB309422.

依處理序可執行檔進行排除Exclusions by process executable

若排除項目是以處理序可執行檔為基礎進行設定,請排除下列處理序:If exclusions are configured based on process executable, exclude the following processes:

元件Component 程序Process
管理伺服器Management servers MonitoringHost.exeMonitoringHost.exe
HealthService.exeHealthService.exe
Microsoft.Mom.Sdk.ServiceHost.exeMicrosoft.Mom.Sdk.ServiceHost.exe
cshost.execshost.exe
閘道伺服器Gateway server HealthService.exeHealthService.exe
MonitoringHost.exeMonitoringHost.exe
Windows 代理程式Windows agent HealthService.exeHealthService.exe
MonitoringHost.exeMonitoringHost.exe
Web 主控台伺服器Web Console server HealthService.exeHealthService.exe
MonitoringHost.exeMonitoringHost.exe
SQL Server1SQL Server1 HealthService.exeHealthService.exe
MonitoringHost.exeMonitoringHost.exe

1 適用於裝載 Operations Manager 資料庫 (操作、資料倉儲、ACS) 及報表伺服器角色的 SQL Server 伺服器。1 For SQL Server servers hosting the Operations Manager databases (Operational, Data Warehouse, ACS) and Reporting server role.

注意

在新增以可執行檔為基礎的排除項目時,請務必額外小心。You must be careful when you add exclusions that are based on executables. 未正確設定的排除項目,可能會使系統無法偵測到某些具有潛在危險性的程式。Incorrectly configured exclusions may prevent some potentially dangerous programs from being detected. 因此,針對 Operations Manager 伺服器,我們不建議仰賴任何以處理序可執行檔為基礎的排除。Therefore, we do not recommend relying on exclusions that are based on any process executables for Operations Manager servers.

依目錄進行排除Exclusions by directories

下列適用於 Operations Manager 的目錄特定排除項目,包含即時掃描、排程掃描,以及本機掃描。The following directory-specific exclusions for Operations Manager include real-time scans, scheduled scans, and local scans. 在此列出的目錄皆為預設的應用程式目錄,因此您可能需要根據您的特定環境修改這些路徑。The directories that are listed here are default application directories so you may have to modify these paths based on your specific environment. 您只應該排除下列與 Operations Manager 相關的目錄。Only the following Operations Manager related directories should be excluded.

注意

當要排除的目錄具有長度超過 8 個字元的目錄名稱時,請同時將該目錄的短目錄名稱和長目錄名稱新增至排除清單。When a directory that is to be excluded has a directory name greater than 8 characters long, add both the short and long directory names of the directory to the exclusion list. 某些防毒程式需要使用這些名稱以周遊子目錄。These names are required by some antivirus programs to traverse sub-directories.

元件Component 目錄排除Directory Exclusion
SQL Server 資料庫伺服器SQL Server database server 排除包含所有 Operations Manager 資料庫、Exclude the directory containing the .ldf and .mdf files for all Operations Manager databases,
報表伺服器資料庫,以及 mastertempdb 資料庫之 .ldf 及 .mdf 檔案的目錄。Report server databases, and the master and tempdb databases.
管理伺服器Management server %ProgramFiles%\Microsoft System Center 2016\Operations Manager\Server\Health Service State for Operations Manager 2016%ProgramFiles%\Microsoft System Center 2016\Operations Manager\Server\Health Service State for Operations Manager 2016
%ProgramFiles%\Microsoft System Center\Operations Manager\Server\Health Service State for Operations Manager 1801 and higher.%ProgramFiles%\Microsoft System Center\Operations Manager\Server\Health Service State for Operations Manager 1801 and higher.
閘道伺服器Gateway server %ProgramFiles%\System Center Operations Manager\Gateway\Health Service State%ProgramFiles%\System Center Operations Manager\Gateway\Health Service State
Windows 代理程式Windows agent %ProgramFiles%\Microsoft Monitoring Agent\Agent\Health Service State%ProgramFiles%\Microsoft Monitoring Agent\Agent\Health Service State
報表伺服器Reporting server %ProgramFiles%\Microsoft System Center 2016\Operations Manager\Reporting for Operations Manager 2016%ProgramFiles%\Microsoft System Center 2016\Operations Manager\Reporting for Operations Manager 2016
%ProgramFiles%\Microsoft System Center\Operations Manager\Reporting for Operations Manager 1801 and higher.%ProgramFiles%\Microsoft System Center\Operations Manager\Reporting for Operations Manager 1801 and higher.
Web 主控台伺服器Web Console server %ProgramFiles%\Microsoft System Center 2016\Operations Manager\WebConsole for Operations Manager 2016%ProgramFiles%\Microsoft System Center 2016\Operations Manager\WebConsole for Operations Manager 2016
%ProgramFiles%\Microsoft System Center \Operations Manager\WebConsole for Operations Manager 1801 and higher.%ProgramFiles%\Microsoft System Center \Operations Manager\WebConsole for Operations Manager 1801 and higher.

依副檔名排除檔案類型Exclusion of file type by extension

下列適用於 Operations Manager 的副檔名特定排除項目,包含即時掃描、排程掃描,以及本機掃描。The following file name extension-specific exclusions for Operations Manager include real-time scans, scheduled scans, and local scans.

元件Component 副檔名排除File Type Extension Exclusion
SQL Server 資料庫伺服器SQL Server database server 排除 .ldf 及 .mdf 副檔名。Exclude file type extension .ldf and .mdf.
這些排除項目包含所有 Operations Manager 資料庫、報表伺服器資料庫的 SQL Server 資料庫檔案,以及 mastertempdb 的系統資料庫檔案。These exclusions include SQL Server database files for all Operations Manager databases, Report Server databases, and the system database files for master and tempdb.
管理伺服器Management server
閘道伺服器Gateway server
代理程式Agents
排除 .edb、.chk 及 .log 副檔名。Exclude file type extensions .edb, .chk, and .log. 這些排除項目包含 Operations Manager 所使用的佇列和記錄檔案。These exclusions includes the queue and log files used by Operations Manager.

後續步驟Next steps

如需所用連接埠的完整清單、通訊的方向以及是否可設定連接埠,請參閱 Configuring a Firewall for Operations Manager (Operations Manager 的防火牆設定)。For a complete listing of ports used, the direction of the communication, and if the ports can be configured, see Configuring a Firewall for Operations Manager.