ARTIFACTORY: Antivirus Exclusions

Introduction 

Real-time antivirus scanning of Artifactory’s installation and data directories can significantly slow down startup and general performance.

This article contains information on which Artifactory directories should be added as excluded directories for Antivirus software, as well as general recommendations to reduce the impact of AV scanning on Artifactory.


Resolution 

1. Exclude the Artifactory installation directory (and all subdirectories) from on-access AV scanning.
   
2. Exclude the Artifactory home/data directory (and all subdirectories), including the filestore, logs, and configuration directories.
   
   1. $ARTIFACTORY_HOME/var/log
      
   2. $ARTIFACTORY_HOME/var/etc
      
   3. $ARTIFACTORY_HOME/var/data
      
3. If required by policy, use scheduled scans during a maintenance window instead of scanning these paths on every read/write.
   
4. Optionally, exclude the Artifactory Java process from behavioral/heuristic scanning.

To confirm impact, compare Artifactory startup time before and after adding these exclusions. If startup time improves markedly, keep these exclusions in place and tune any scheduled scans accordingly.