VMware Horizon Community
apelz
Enthusiast
Enthusiast

ExcludeFiles with wildcards

Hey guys,

i hope someone can help me. We are using the security solution palo alto traps for endpoint protection. This software is creating some honeypot files inside of the userprofile. The files are hidden and look likes:

pastedImage_0.png

Now i want to exclude this files from uem and tried different ways:

[ExcludeFiles]

!!!!![MATCHALL]

!!!!![MATCHALL].[MATCHALL]

!!!!!*.*

!!!!!*

Nothing is working. The files still in the uem profile. For testing im always deleting the profile.

Can someone tell me the correct syntax?

Were using UEM 9.2.0.794

best regards

Alex

Reply
0 Kudos
3 Replies
DEMdev
VMware Employee
VMware Employee

Hi apelz,

The correct way to configure this is as follows:

[ExcludeFiles]

!!!!!*.*

However, that exclusion applies only to the Flex config file(s) that you put that exclude in. So, if you have a config file like

[IncludeFolderTrees]

<Desktop>

[ExcludeFiles]

!!!!!*.*

then none of the honeypot files on the desktop (or in any sub folders of the desktop) will be exported. If another config file exports some other folder, but that config file does not contain the same exclude header, then the honeypot files from that folder will be exported.

Could that explain the behavior you're seeing?

In UEM 9.4 we added a Global Excludes feature, which allows for defining, umm, global excludes once, and having them applied to each Flex config file. As that's a very specific feature, we didn't document it – I'd be happy to explain it, but as you're on 9.2 that's not going to help at this time anyway. In 9.2 the only solution is to specify the !!!!!*.* exclude in each and every Flex config file.

Reply
0 Kudos
VMHero4Ever
Enthusiast
Enthusiast

I have a similar issue with ExcludeFolders instead of Files

The config is for Google Chrome Browser.

I want to exclude for example following folders (including subfolders/files)

 

[ExcludeFolderTrees]

<LocalAppData>\Google\Chrome\User Data\Default\old_Cache_002

<LocalAppData>\Google\Chrome\User Data\Default\old_Cache_003

<LocalAppData>\Google\Chrome\User Data\Default\old_Cache_004

<LocalAppData>\Google\Chrome\User Data\Default\old_Cache_005

<LocalAppData>\Google\Chrome\User Data\Default\old_Cache_........

and so on


How can I easily exclude all these cache folders in this path?

 

Regards,
VMHero4ever

 

 

Reply
0 Kudos
DEMdev
VMware Employee
VMware Employee

Hi @VMHero4Ever,

You can use Wildcard Support in Exclude Section Headers for this:

[ExcludeFolderTrees]
<LocalAppData>\Google\Chrome\User Data\Default\old_Cache_[MATCHALL]

Reply
0 Kudos