Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Exclude partition from scan

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI

This thread has been marked as resolved.
creibens Exclude partition from scan
Member 25th Jun, 2010 17:49
Ranking: -3
Posts: 9
User Since: 16th Nov, 2008
System Score: 87%
Location: DE
Hi,

I tried to exclude a complete partition from the scan by defining an appropriate exception rule "J:\" (J is the partition to be excluded). Unfortunately, this setting has no effect. The partition is scanned completely anyway.

Is this a bug, or am I doing something wrong?

Claus

--
Claus

Post "RE: Exclude partition from scan" has been selected as an answer.
Maurice Joyce RE: Exclude partition from scan
Handling Contributor 25th Jun, 2010 17:58
Score: 11304
Posts: 8,721
User Since: 4th Jan 2009
System Score: N/A
Location: UK
No by default PSI scan ALL hard drives. By creating an ignore rule for J the results from the drive will not be published.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+2
-0
Anthony Wells RE: Exclude partition from scan
Expert Contributor 25th Jun, 2010 18:01
Score: 2384
Posts: 3,280
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Last edited on 25th Jun, 2010 18:03
Hello Claus ,

PSI will scan all drives it can get it's hands on .

The ignore rule tells PSI not to display anything in the scan results from the file/folder/drive for which you have set the rule . It will get scanned if PSI "sees" it .

Are you saying that PSI is displaying data from the J drive ??

Anthony

Edit ; cross-posting , I will leave it to Maurice Joyce to continue .

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+1
-0
creibens RE: Exclude partition from scan
Member 25th Jun, 2010 19:41
Score: -3
Posts: 9
User Since: 16th Nov 2008
System Score: 87%
Location: DE
Hello,

on 25th Jun, 2010 18:01, Anthony Wells wrote:
PSI will scan all drives it can get it's hands on .

The ignore rule tells PSI not to display anything in the scan results from the file/folder/drive for which you have set the rule . It will get scanned if PSI "sees" it.


So, these rules do not affect the scan, but only filter the results? This is bad.

The partition is quite big (1.5 TB), contains many files (severel generations of backups from 3 computers), and resides on an external USB drive (slow). The scanning of this partition takes a very long time and will display no results, neither with nor without ignore rule (it's a pure data partition). So, there is no need to scan it at all. Therefore, I want to exclude it from the scan itself and not only filter the results.

Is there a way to achieve this?

--
Claus
Was this reply relevant?
+0
-0
Anthony Wells RE: Exclude partition from scan
Expert Contributor 25th Jun, 2010 20:31
Score: 2384
Posts: 3,280
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Hello Claus ,

While waiting for Maurice Joyce to pick up , I can add :-

PSI only runs an automatic full scan at one week intervals . If you run a manual scan , then the next scan is preset for one week later plus or minus an hour or so - depending on your geographical location .

You could decide to run the scan manually when you have enough time for PSI to do its full job without it conflicting with your work on your PC . You could also consider "unplugging" your J drive when you wish to scan , a "normal" scan is usually fairly quick .

I am sure Maurice Joyce will correct me if I am wrong and perhaps has another suggestion .

Take care
Anthony


--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+1
-0
Maurice Joyce RE: Exclude partition from scan
Handling Contributor 25th Jun, 2010 21:01
Score: 11304
Posts: 8,721
User Since: 4th Jan 2009
System Score: N/A
Location: UK
@Anthony,
Nothing really to add. It scans all hard drives by default. There was a head of steam from a few members months ago with the same type of "problem".

The Secunia answer then was, & to the best of my knowledge, remains that anyone wanting to completely exclude a drive from scanning should buy CSI.

With PSI it is WYSIWYG.

U have covered the practical solution. There is no way that amount of backup will go on a USB "pen drive" which is not scanned.



--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+2
-0
creibens RE: Exclude partition from scan
Member 25th Jun, 2010 23:16
Score: -3
Posts: 9
User Since: 16th Nov 2008
System Score: 87%
Location: DE
on 25th Jun, 2010 21:01, Maurice Joyce wrote:
... anyone wanting to completely exclude a drive from scanning should buy CSI.


If I understand your website correctly, then CSI is for companies and not for private users, and the cheapest version costs 2,000 . Thus, this is definitely not an alternative for private users.

Anyway, thank you all for all your answers. Seems I got to live with this :-(

--
Claus
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Factsheets
Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability