Interoperability with Dell CMG (Data Protection and Encryption)

Description

To learn how to exclude files and folders please see Capture Client Interoperability Issues with Third Party Applications.

Resolution

Items to exclude:

See the Dell recommendations in this article: What to Exclude in an Antivirus Application for Dell Encryption Enterprise or Dell Encryption Personal

A summary of the recommendations is create these exclusions:

For v8.16.0 to Present

  • Directory (Path Exclusion):

    C:\Program Files\Dell\Dell Data Protection\

  • Files (Path Exclusions):

    C:\Program Files\Dell\Dell Data Protection\Encryption\CmgShieldSvc.exe

    C:\Program Files\Dell\Dell Data Protection\Encryption\EmsService.exe

    C:\ Program Files\Dell\Dell Data Protection\Encryption\EmsServicehelper.exe

    C:\windows\system32\drivers\CMGCrypt.mac

    C:\Windows\System32\Drivers\cmgffe.sys

    C:\Windows\System32\Drivers\cmgfve.sys

    C:\windows\system32\drivers\cmghiber.mac

    C:\Windows\System32\Drivers\cmghiber.sys

    C:\Windows\System32\Drivers\cmgpcs.sys

    C:\Windows\System32\Drivers\CMGShCEF.sys

    C:\Windows\System32\Drivers\cmgshreg.sys

    C:\Windows\System32\Drivers\KlcE.sys

    C:\Windows\System32\Drivers\KlcH.sys

To exclude SentinelOne from Dell:

  1. Exclude these folders and the update file:

    • C:\Program Files\SentinelOne

    • C:\ProgramData\Sentinel

    • C:\Documents and Settings\All Users\Application Data\Sentinel (ProgramData for 2003 and legacy agents )

    • C:\Windows\Temp\SentinelInstaller.exe

    Note: Make sure to exclude subfolders. Some solutions automatically exclude subfolders, but others require explicit notation.

  2. Exclude the SentinelOne Agent kernel-mode driver, service, and dynamic library:

    • Kernel-Mode driver: SentinelMonitor.sys

    • Windows Service: SentinelAgent.exe

    • 32-bit DLL: InProcessClient32.dll

    • 64-bit DLL: InProcessClient64.dll

Related Articles

  • Integrating with 3rd Party Syslog and Threat Detection Platforms
    Read More
  • How to Generate a Capture Client (SentinelOne) API Key Using a Service User
    Read More
  • Integrating SonicWall Capture Client with SonicWall Firewalls
    Read More
not finding your answers?