Ask the Community
Groups
How to: Configure Interoperability between SentinelOne and Unitrends - Connect IT Community | Kaseya
<main> <article class="userContent"> <div>Malware is designed to modify or destroy your data. Unitrends is designed to protect and restore your precious data. SentinelOne doesn’t know the difference between the bad guys and Unitrends, it just knows something is trying to touch something, that it believes shouldn't. Therefore, you will need to show SentinelOne what belongs to Unitrends so that it doesn't stop the backup/recovery process.</div> <div></div> <div>Following was confirmed working with the SentinelOne Agent version 4.2 (minimum)</div> <div> </div> <div> <strong> Knowledge Required:</strong> <a href="/home/leaving?allowTrusted=1&target=https%3A%2F%2Fwww.sentinelone.com%2Fresources%2Fconfigure-exclusions-include-sentinelone-policies%2F" rel="noopener nofollow">How to Configure Exclusions and Include them in SentinelOne Policies</a> </div> <div> </div> <div> </div> <div><strong>STEP 1: </strong> In the <strong>SentinalOne Management Console</strong></div> <div> </div> <div>Click <strong>Settings</strong> > <strong>Exclusions</strong> > <strong>Path</strong></div> <div><strong> </strong></div> <div><strong><img src="https://us.v-cdn.net/6032361/uploads/migrated/GDV1L20H1ANC/blobid0.png" alt="blobid0.png" class="embedImage-img importedEmbed-img"></img></strong></div> <div> </div> <div> <div> Add the following and choose the <strong>Exclusion Mode</strong> of <strong>Interoperability - extended</strong><span style="color: #292929; font-family: system-ui;"> (minimum) and include subfolders.</span> </div> <ul><li> <div>C:\PCBP\</div> </li> <li> <div>C:\unicbt\</div> </li> <li> <div>C:\Unitrendsvcbt\</div> </li> </ul><div><span style="color: #292929; font-family: system-ui;">If backup performance is poor and/or you continue to experience random backup errors, choose the Exclusion Mode of</span> "Performance Focus - extended". If this final setting works, contact SentinelOne Support. You may need to provide to them the latest <a href="/home/leaving?allowTrusted=1&target=https%3A%2F%2Fbpagent.s3.amazonaws.com%2Flatest%2Fwindows%2FUnitrends_Agentx64.msi" rel="noopener nofollow">Unitrends</a><a href="/home/leaving?allowTrusted=1&target=https%3A%2F%2Fbpagent.s3.amazonaws.com%2Flatest%2Fwindows%2FUnitrends_Agentx64.msi" rel="noopener nofollow"> Client Agent for Windows</a>.</div> <div> </div> <div> NOTE 1: Unitrends Volume CBT driver is a Kernel mode driver which may require</div> <div> Performance Focus or higher.</div> <div> NOTE 2: Unitrends Hyper-v CBT driver is a MiniFilter driver and may require </div> <div> Performance Focus or higher.</div> <div> </div> <div> Restart this Server and verify the changes took place.</div> <div> </div> <div> </div> <div> <strong> STEP 2:</strong> Using an elevated Administrative Command Prompt, execute the instructions and commands below:</div> <div> </div> <ol><li>Change to the directory where SentinalOne installed at.<br>(default is <strong>c:\program files\sentinelone\sentinel agent x.x.x.x\</strong> where x.x.x.x is the version that you are running.) </li> <li> Use the <strong>sentinelctl</strong>.exe to tell the SentinelOne agent to disable the agent's proprietary vss writers and use the standard Windows VSS writers instead. Execute the command below based on the release of SentinelOne you are using:<br><br><img src="https://us.v-cdn.net/6032361/uploads/migrated/40NYNHCBIUQB/mceclip1.png" alt="mceclip1.png" class="embedImage-img importedEmbed-img"></img></li> <li>Once completed, restart the server one final time.</li> <li> You can now begin your backups (recommend you start with <a href="https://kaseya.vanillacommunities.com/kb/articles/aliases/unitrends/hc/en-us/articles/360013257178" rel="noopener nofollow">an On-demand 1-Time Full </a>to ensure we get all the data that has been missed.<br></li> </ol></div> </article> </main>