How to set up exceptions for Safetica in Sophos
Learn how to whitelist certain paths, files, and URLs in Sophos
To ensure full compatibility and avoid possible conflict between Sophos and Safetica, you must exclude certain files, folders, and URL addresses from being scanned for threats by Sophos.
The list of files and URLs to exclude can be found here.
To set exceptions in Sophos:
- Go to My Products > General Settings > Global Exclusions.
- Click Add Exclusion (upper right of the exclusions list).
- In Exclusion Type, select Exploit Mitigation and Activity Monitoring (Windows).
- You see a list of Protected Applications found on your network.
- Click Application not listed?.
- You can then exclude an application by its file path. Optionally, use any of the variables. See Exploit mitigation or ransomware wildcards and variables.
- Add the path to the Safetica executables:
- C:\Program Files\Safetica\netcore\STContentService.exe
- C:\Program Files\Safetica\netcore\STInfoService.exe
- C:\Program Files\Safetica\STCService.exe
- C:\Program Files\Safetica\STUserApp.exe
- C:\Windows\SysWOW64\STEventService.exe
- Under Mitigations, turn off Protect Application. The application won’t be checked for any exploits.
- Click Add Another. The exclusion is added to the list on the Global Exclusions page.
You can find related information directly on the Sophos Knowledge Base here: Sophos Central Endpoint: Safetica Data Loss Prevention may be unable to upload events to Safetica console