In most cases, you can back up devices in your environment with CrashPlan and protect your devices with antivirus software without any issues. However, some antivirus programs have specific requirements for optimal behavior. This article describes our best-practice recommendations for best performance with both CrashPlan and your antivirus software.
Best practices for CrashPlan and antivirus
CrashPlan can work alongside most antivirus programs without any problems. However, certain software configurations can cause CrashPlan and an antivirus program to compete for locked files or system resources. As a result, we recommend configuring your antivirus program to exempt CrashPlan's data folders and runtime processes.
Ignoring CrashPlan's data folders and runtime processes is not a significant security concern. CrashPlan backs up your existing files, but only creates two types of files:
- backup archives
- cache files, used in processing backups
Backup archives and antivirus
The contents of backup archives are compressed and encrypted. Even if a backup archive contains a malicious file, antivirus software cannot inspect the contents of an archive. Furthermore, malicious files cannot activate or spread while in a compressed and encrypted form.
Most importantly, backup archives only contain data that is already stored elsewhere. To detect malicious files, scan the source, not the backup archive.
Cache files and antivirus
CrashPlan's cache files are benign records of CrashPlan operations. They only contain information about CrashPlan activity, and therefore they can be ignored by antivirus scans.
Configuring CrashPlan and antivirus programs
We recommend configuring both CrashPlan and your antivirus program to avoid potential unwanted interactions with each other.
Information about products from other manufacturers is intended as a resource to help you get the most out of Code42 products. However, our Customer Champions cannot provide direct assistance for these products. For assistance with products not developed by Code42, contact the product's manufacturer.
Configuring your antivirus program to exclude CrashPlan
Some antivirus programs operate by scanning folders. For antivirus programs that work on a per-folder basis, we recommend excluding these CrashPlan folders from live scans:
- CrashPlan's app data folder
- The CrashPlan application folder
- CrashPlan logs
- CrashPlan archive folders (destinations where CrashPlan archives are stored)
See File & Folder Hierarchy for the default locations of these folders on all supported operating systems.
Some antivirus programs operate by monitoring the processes running on your computer. For antivirus programs that work on a per-process basis, we recommend configuring the antivirus program to allow the CrashPlan service (sometimes called adding an exception). The steps for allowing the CrashPlan service vary by program, so consult your antivirus documentation for details.
Configuring CrashPlan to exclude your antivirus program
As antivirus programs scan your computer, they create cache files. Depending on your file selection, CrashPlan may attempt to back up these cache files. We recommend excluding antivirus caches from your CrashPlan file selection for several reasons:
- The need to restore these cache files is very unlikely
- Antivirus programs may attempt to scan CrashPlan's cache files of the antivirus cache, causing an endless loop
To exclude your antivirus cache from your CrashPlan backup:
- Consult your antivirus program's documentation to find the antivirus cache location.
- Sign in to your administration console.
- Go to Settings > Device Backup > Backup.
- Use the File Selection settings to exclude the antivirus cache location for all devices in your Code42 environment.