Devices Not Appearing in Console After Installing Endpoint Security Tools

Product Version: 6.5.0.0

Overview

After installing Endpoint Security Tools (Antivirus), devices may not appear in the Saner CVEM console. This occurs because certain executable files required by the Saner CVEM agent can be blocked by Antivirus software, preventing proper reporting.

Affected Deployment Types

• In-House / On-Premise

• Cloud Deployment

Solution

Configure Antivirus Exclusions

To prevent interruption of Saner CVEM agent functionality, configure Antivirus exclusions by adding the necessary folder and file exceptions as described below.

Windows

Executable Path: C:\Program Files (x86)\SecPod Saner\Agent\6.5.x.x\bin

Files to Exclude:

• spdialogbox20.exe

• spfileindexer.exe

• spfirmware32.exe

• spfirmware64.exe

• spsaneragnt.exe

• spsanerrun.exe

• spsaneruninstall.exe

• spscanmanager.exe

• spagentwatchdog.exe

• spdialogbox.exe

Folder to Exclude: C:\Program Files (x86)\SecPod Saner

Linux

Service Locations:
 

• /usr/bin/spsaner.service
• /usr/bin/spscanmanager
• /usr/bin/spagentwatchdog
• /usr/bin/spsaner_servicelauncher
• /usr/sbin/spsaneragent
  
  

Folders to Exclude:

• Settings: /etc/sane/

• Update Path: /var/saner

• Libraries: /usr/lib64/saner

• Logs: /var/log/saner

Mac OSX

Service Locations:

• /usr/local/bin/spsaneragent
• /usr/local/bin/spscanmanager
• /usr/local/bin/spagentwatchdog
• /usr/local/bin/spupgradecontroller
• /usr/local/bin/spmessagebox
• /usr/local/bin/spsaner_deactivate
  
  

Folders to Exclude:

• Settings: /etc/saner
• Update Path: /var/saner/
• Libraries: /usr/local/lib/saner
• Logs: /var/log/saner

Outcome

Once the recommended exclusions are configured, devices will start reporting properly to the Saner CVEM console, ensuring full visibility, monitoring, and management of endpoints.

Conclusion

Blocking essential executable files can prevent Saner CVEM agents from reporting to the console. Applying the antivirus exclusions outlined above ensures uninterrupted agent functionality across Windows, Linux, and Mac OSX platforms. This step is critical for maintaining real-time endpoint visibility and enabling effective patch and vulnerability management in Saner CVEM.

For additional assistance, please contact SecPod Support.