General recommendations for virus scanner exclusions working with NetBackup

  • Modified Date:
  • Article ID:000011619

Problem

Processes locked, or poor performance during backups/restores/duplications.

Cause

Antivirus or soft firewall programs which may interfere with NetBackup function(s) by blocking process interactions and preventing components to execute correctly.

Solution

While this cannot be a definitive list due to the different methods of antivirus products available; please add exclusions in your antivirus product for the following commonly blocked items:

[ I ] Exclude on Windows NetBackup clients:

  1. C:\Program Files (x86)\VERITAS\VxPBX\bin\pbx_exchange.exe
  2. <InstallPath>\Veritas\NetBackup\bin\bpbkar32.exe
  3. <InstallPath>\Veritas\NetBackup\bin\bpinetd.exe
  4. <InstallPath>\Veritas\NetBackup\bin\bpfis.exe
  5. <InstallPath>\Veritas\NetBackup\bin\bpcd.exe
  6. <InstallPath>\Veritas\NetBackup\bin\nbdisco.exe
  7. <InstallPath>\Veritas\NetBackup\bin\vnetd.exe
  8. <InstallPath>\Veritas\NetBackup\bin\nbostpxy.exe
  9. <InstallPath>\Veritas\NetBackup\bin\nbftclnt.exe
  10. <InstallPath>\Veritas\pdde\mtstrmd.exe
  11. <InstallPath>\Veritas\NetBackup\online_util\fi_cntl (This directory is empty when no snapshot exists but gets populated when a cache file is created)
  12. Check with antivirus that the archive bit is not changed after a scan as this will effect the incremental backup based on archive bit
  13. For performance, do not scan files during backup as this would slow the backup.
  14. When using the Accelerator feature, exclude the following files on the root of each drive:
    1. *:\VxCJInfo.dat
    2. *:\VxCJDelete.dat
    3. *:\VxCJMon.dat
  15. Exclude the NetBackup Accelerator track journals located in the subdirectories of <InstallPath>\Veritas\NetBackup\track\*

 

[ II ] Exclude on NetBackup Master/Media servers:

  1. Same as client above (remember they are also NetBackup clients)
  2. Exclude the NetBackup and Volmgr directories.
  3. If possible, set the scanner to scan inbound traffic only, this will help to avoid any performance/degradation for the backup when it takes place. The virus scanner will see files as being opened when NetBackup accesses them during a job. By setting the scanner to scan inbound traffic the scan will not take place during a backup.

However, the performance hit is usually negligible when scanning inbound and outbound traffic. A lot of this depends on the specification of the client.

 

[ III ] If possible, the Antivirus software should have the following directories and / or processes excluded from scanning:

A. Directories to Exclude:

For a 32-bit machines:

  1. <InstallPath>\Veritas\NetBackup (and all sub-directories)
  2. <InstallPath>\Veritas\\Volmgr (and all sub-directories)
  3. <InstallPath>\Veritas\NetBackupDB
  4. C:\Program Files\VERITAS\VxPBX
  5. <InstallPath>\Veritas\pdde

For a 64-bit machines:

  1. <InstallPath>\Veritas\NetBackup (and all sub-directories)
  2. <InstallPath>\Veritas\\Volmgr (and all sub-directories)
  3. <InstallPath>\Veritas\NetBackupDB
  4. C:\Program Files (x86)\VERITAS\VxPBX
  5. <InstallPath>\Veritas\pdde


B. Processes to Exclude on a Master Server (Windows notation):

  1. dbsrv16.exe - Adaptive Server Anywhere - NetBackup Relational Database Manager  (check service to identify precise binary name as it will change when NBU is updated)
  2. nbars.exe - NetBackup Agent Request Server
  3. nbaudit.exe - NetBackup Audit Manager
  4. nbatd.exe - NetBackup Authentication
  5. nbazd.exe - NetBackup Authorization
  6. bmrd.exe - NetBackup Bare Metal Restore Master Server
  7. nbcssc.exe - NetBackup CloudStore Service Container
  8. bpcompatd.exe - NetBackup Compatibility Service
  9. spoold.exe - NetBackup Deduplication Engine
  10. spad.exe - NetBackup Deduplication Manager
  11. mtstrmd.exe - NetBackup Deduplication Multi-Threaded Agent
  12. nbdisco.exe - NetBackup Discovery Framework
  13. nbevtmgr.exe - NetBackup Event Manager
  14. nbim.exe - NetBackup Indexing Manager
  15. nbkms.exe - NetBackup Key Management Service
  16. nbemm.exe - NetBackup Enterprise Media Manager Service
  17. nbjm.exe - NetBackup Job Manager Service
  18. nbnos.exe - NetBackup Notification Service (on NetBackup 6.x and earlier)
  19. nbpem.exe - NetBackup Policy Execution Manager Service
  20. nbrb.exe - NetBackup Resource Broker Service
  21. nbrmms.exe - NetBackup Remote Manager and Monitor Service
  22. nbsl.exe - NetBackup Service Layer Service
  23. nbostpxy.exe - NetBackup Proxy Service
  24. nbsvcmon.exe - NetBackup Service Monitor Service
  25. nbstserv.exe - NetBackup Storage Lifecycle Manager
  26. nbvault.exe - NetBackup Vault Manager Service
  27. nbftclnt.exe - NetBackup SAN Client Fibre Transport Service
  28. nbwmc.exe - NetBackup Web Management Console
  29. java.exe - Tomcat
  30. vnetd.exe - NetBackup Legacy Network Service
  31. vmd.exe - NetBackup Volume Manager Service
  32. bpcompatd.exe - NetBackup Compatibility Service
  33. bpinetd.exe - NetBackup Client Service
  34. bpdbm.exe - NetBackup Database Manager Service
  35. ltid.exe - NetBackup Device Manager Service
  36. bprd.exe - NetBackup Request Manager Service
  37. bpjobd.exe - NetBackup Job Daemon
  38. bpbkar32.exe - NetBackup Backup Engine
  39. bpbrm.exe - NetBackup Backup and Restore Manager
  40. bpcd.exe - NetBackup Connection Daemon
  41. bptm.exe - NetBackup Tape Manager
  42. bpdm.exe - NetBackup Disk Manager
  43. tar32.exe - NetBackup Restore Engine
  44. pbx_exchange.exe - Veritas (Symantec) Private Branch Exchange Service


C. Antivirus Exclusions for Unix:

Veritas has some general recommendations for Antivirus exclusions on a Master and Media servers. For specific exclusion details, please contact the Antivirus Software vendor.

On a Master or Media server, it is recommended that you exclude the following directories from scans:

<install>/openv/db                                          
<install>/openv/java  
<install>/openv/netbackup                                               
<install>/openv/runtime_data
<install>/openv/share
<install>/openv/kms   
<install>/openv/pack                                                    
<install>/openv/lib   
<install>/openv/pdde                                                    
<install>/openv/tmp
<install>/openv/logs  
<install>/openv/var
<install>/openv/volmgr
<install>/openv/msg   
<install>/openv/resources      
( Essentially, everything under <install>/openv )

/opt/VRTSpbx
/msdp
<DSU storage path>
<DSSU storage path>
<Other storage LUNS>

Terms of use for this information are found in Legal Notices.

Search

Survey

Did this article answer your question or resolve your issue?

No
Yes

Did this article save you the trouble of contacting technical support?

No
Yes

How can we make this article more helpful?

Email Address (Optional)