General recommendations for virus scanner exclusions working with NetBackup

General recommendations for virus scanner exclusions working with NetBackup

Article: 100004864
Last Published: 2020-10-27
Ratings: 18 5
Product(s): NetBackup


Processes locked, and slow or relatively poor performance during backups, restores, or other operations.



Anti-virus or soft firewall programs may interfere with NetBackup function(s) by blocking process interactions and preventing components to execute correctly. They may also quarantine or delete NetBackup files, assuming they are affected by some type of malware. 



While this cannot be a definitive list due to the different methods of anti-virus products available; please add exclusions in your anti-virus product for the following commonly blocked items:

[ I ] Exclude on Windows NetBackup clients:

  1. C:\Program Files (x86)\VERITAS\VxPBX\bin\pbx_exchange.exe
  2. <InstallPath>\Veritas\NetBackup\bin\bpbkar32.exe
  3. <InstallPath>\Veritas\NetBackup\bin\bpinetd.exe
  4. <InstallPath>\Veritas\NetBackup\bin\bpfis.exe
  5. <InstallPath>\Veritas\NetBackup\bin\bpcd.exe
  6. <InstallPath>\Veritas\NetBackup\bin\nbdisco.exe
  7. <InstallPath>\Veritas\NetBackup\bin\vnetd.exe
  8. <InstallPath>\Veritas\NetBackup\bin\nbostpxy.exe
  9. <InstallPath>\Veritas\NetBackup\bin\nbftclnt.exe
  10. <InstallPath>\Veritas\pdde\mtstrmd.exe
  11. <InstallPath>\Veritas\NetBackup\online_util\fi_cntl (This directory is empty when no snapshot exists but gets populated when a cache file is created)
  12. Check with antivirus that the archive bit is not changed after a scan as this will effect the incremental backup based on archive bit
  13. For performance, do not scan files during backup as this would slow the backup.
  14. When using the Accelerator feature, exclude the following files on the root of each drive:
    1. *:\VxCJInfo.dat
    2. *:\VxCJDelete.dat
    3. *:\VxCJMon.dat
  15. Exclude the NetBackup Accelerator track journals located in the subdirectories of <InstallPath>\Veritas\NetBackup\track\*
  16. When using MSDP Deduplication Multi-Threaded Agent,exclude the following directory
    1. C:\ProgramData\boost_interprocess
  17. When using an external certificate authority (ECA), exclude the FilePath specified in the following entry. The entry details can be found using bpgetconfig or nbgetconfig command.


[ II ] Exclude on NetBackup Master/Media servers:

  1. Same as client above (remember they are also NetBackup clients)
  2. Exclude the NetBackup and Volmgr directories.
  3. If possible, set the scanner to scan inbound traffic only, this will help to avoid any performance/degradation for the backup when it takes place. The virus scanner will see files as being opened when NetBackup accesses them during a job. By setting the scanner to scan inbound traffic the scan will not take place during a backup.

However, the performance hit is usually negligible when scanning inbound and outbound traffic. A lot of this depends on the specification of the client.


[ III ] If possible, the Antivirus software should have the following directories and / or processes excluded from scanning:

A. Directories to Exclude:

For a 32-bit machines:

  1. <InstallPath>\Veritas\NetBackup (and all sub-directories)
  2. <InstallPath>\Veritas\\Volmgr (and all sub-directories)
  3. <InstallPath>\Veritas\NetBackupDB
  4. C:\Program Files\VERITAS\VxPBX
  5. <InstallPath>\Veritas\pdde

For a 64-bit machines:

  1. <InstallPath>\Veritas\NetBackup (and all sub-directories)
  2. <InstallPath>\Veritas\\Volmgr (and all sub-directories)
  3. <InstallPath>\Veritas\NetBackupDB
  4. C:\Program Files (x86)\VERITAS\VxPBX
  5. <InstallPath>\Veritas\pdde
  6. When using VMware HotAdd backups (Use as a mount point), exclude the following directory.
  1. VMware Backup host on Windows:
    1. C:\Windows\Temp\vmware-SYSTEM
  2. VMware Backup host on Linux:
    1. /tmp/vmware-root/


B. Processes to Exclude on a Master Server (Windows notation):

  1. dbsrv16.exe - Adaptive Server Anywhere - NetBackup Relational Database Manager  (check service to identify precise binary name as it will change when NBU is updated)
  2. nbars.exe - NetBackup Agent Request Server
  3. nbaudit.exe - NetBackup Audit Manager
  4. nbatd.exe - NetBackup Authentication
  5. nbazd.exe - NetBackup Authorization
  6. bmrd.exe - NetBackup Bare Metal Restore Master Server
  7. nbcssc.exe - NetBackup CloudStore Service Container
  8. bpcompatd.exe - NetBackup Compatibility Service
  9. spoold.exe - NetBackup Deduplication Engine
  10. spad.exe - NetBackup Deduplication Manager
  11. mtstrmd.exe - NetBackup Deduplication Multi-Threaded Agent
  12. nbdisco.exe - NetBackup Discovery Framework
  13. nbevtmgr.exe - NetBackup Event Manager
  14. nbim.exe - NetBackup Indexing Manager
  15. nbkms.exe - NetBackup Key Management Service
  16. nbemm.exe - NetBackup Enterprise Media Manager Service
  17. nbjm.exe - NetBackup Job Manager Service
  18. nbnos.exe - NetBackup Notification Service (on NetBackup 6.x and earlier)
  19. nbpem.exe - NetBackup Policy Execution Manager Service
  20. nbrb.exe - NetBackup Resource Broker Service
  21. nbrmms.exe - NetBackup Remote Manager and Monitor Service
  22. nbsl.exe - NetBackup Service Layer Service
  23. nbostpxy.exe - NetBackup Proxy Service
  24. nbsvcmon.exe - NetBackup Service Monitor Service
  25. nbstserv.exe - NetBackup Storage Lifecycle Manager
  26. nbvault.exe - NetBackup Vault Manager Service
  27. nbftclnt.exe - NetBackup SAN Client Fibre Transport Service
  28. nbwmc.exe - NetBackup Web Management Console
  29. java.exe - Tomcat
  30. vnetd.exe - NetBackup Legacy Network Service
  31. vmd.exe - NetBackup Volume Manager Service
  32. bpcompatd.exe - NetBackup Compatibility Service
  33. bpinetd.exe - NetBackup Client Service
  34. bpdbm.exe - NetBackup Database Manager Service
  35. ltid.exe - NetBackup Device Manager Service
  36. bprd.exe - NetBackup Request Manager Service
  37. bpjobd.exe - NetBackup Job Daemon
  38. bpbkar32.exe - NetBackup Backup Engine
  39. bpbrm.exe - NetBackup Backup and Restore Manager
  40. bpcd.exe - NetBackup Connection Daemon
  41. bptm.exe - NetBackup Tape Manager
  42. bpdm.exe - NetBackup Disk Manager
  43. tar32.exe - NetBackup Restore Engine
  44. pbx_exchange.exe - Veritas (Veritas) Private Branch Exchange Service
  45. cmd.exe - this is called by NetBackup nbproxy.exe, nbpem.exe and nbjm.exe

C. Antivirus Exclusions for Unix:

Veritas has some general recommendations for Antivirus exclusions on a Master server, Media servers, and Clients. For specific exclusion details, please contact the Antivirus Software vendor.

It is recommended that you exclude the following directories from scans:

<install>/openv/runtime_data (existing on NetBackup Appliances)
( Essentially, everything under <install>/openv )

<MSDP storage path>
<DSU storage path>
<DSSU storage path>
<Other storage LUNS>

Was this content helpful?