Emerson Exchange 365

Tune up Trellix to have no impact on DeltaV Operate and PHV?

There's a movement to schedule weekly virus scans of operator workstations. My fear is that somehow dynamo / live data updates and / or trends will stall or be delayed in some fashion.

Has anyone documented how to configure Trellix to leave Operate and PHV alone and whatever services are necessary to provide timely updates?

Thanks,

John

John Rezabek

• 27 Aug 2024 1:13 PM
• Cancel

5 Replies

• Tadeu Batista

  

  • 27 Aug 2024 4:19 PM

  Hello John Rezabek ,
  
  Could you expand a little bit more on your concern here? It's not clear to me how a weekly update on the ePO signature would impact DeltaV Operate/Live performance.
  
  Rgs,

  • Cancel
• John Rezabek

  

  • 27 Aug 2024 6:35 PM

  In reply to Tadeu Batista:

  Not the update per se - but a weekly scan scheduled on an operator station. These scans impact office PC's, or was that an artifact of yesteryear's antivirus? I don't want operators to experience degraded performance because a scan is underway.

  • Cancel
• Tadeu Batista

  

  • 27 Aug 2024 9:22 PM

  In reply to John Rezabek:

  John Rezabek Now it's clear your concern. The Full Scan is still an option, but to your point it's very time and resources consuming, therefore not recommended.
  
  Emerson uses Trellis Endpoint Security, it's Threat Prevention uses modern scan techniques that have minimum impact on performance, allowing the station to be constantly scanned.
  
  Rgs,

  • Cancel
• John Rezabek

  

  • 29 Aug 2024 7:37 PM

  In reply to Tadeu Batista:

  Yep we are working with zafarulhaq.khan@emerson.com and others to deploy Endpoint as well as SolidCore. From your statement, it sounds like periodic virus scans don't add much value anyhow - Endpoint security is active already and monitoring for exploits?

  • Cancel
• Tadeu Batista

  

  • 30 Aug 2024 1:03 PM

  In reply to John Rezabek:

  John Rezabek , combining different techniques such as Endpoint Security and Application Allow Listing would be more effective than trying to pull an workstation OOS for a full scan.

  • Cancel