Skip to main content
rduggal_FTNT
Staff
Staff
November 27, 2024

Technical Tip: Performance Issues when Windows Defender is running in Parallel with FortiEDR

  • November 27, 2024
  • 0 replies
  • 6384 views
Description This article describes how to prevent any performance issues and false positives when 2 or more NGAVs/endpoint security solutions run in parallel.
Scope Applies to both On-prem and cloud FortiEDR deployments.
Solution

Login to FortiEDR Manager -> Security Settings -> Exclusion Manager -> Add a new list and name it 'Windows Defender' -> Add the required collector group to it and add the below exclusions:

 

smartscreen.exe   \Windows\System32\                      process

\Program*\Windows Defender\*                              process

*\ProgramData\Microsoft\Windows Defender\*                execution prevention

*\ProgramData\Microsoft\Windows Defender\                 execution prevention

*\ProgramData\Windows Defender\*                          execution prevention

*\ProgramData\Windows Defender\                           execution prevention

*\Windows Defender Advanced Threat Protection\            process and execution prevention

 

It is also required to exclude FortiEDR’s processes on Windows Defender. Refer to the below article which contains a list of FortiEDR’s processes:

Technical Tip: Paths to exclude Antivirus exceptions in 3rd Party Antivirus

 

If there are still any problems encountered, open a new technical support ticket for further assistance: Support Fortinet.

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.