Orbital Exclusions

When using Orbital with third-part endpoint detection and response solutions, you will need to exclude Orbital executable files from those products to prevent interference with Orbital functionality. Refer to your vendor documentation for information on creating exclusions.

 

Windows

Create exclusions for Orbital and related executable files in these default locations on Windows operating systems:

  • C:\Program Files\Cisco\Orbital\orbital-ampwin.exe

  • C:\Program Files\Cisco\Orbital\Orbital.exe

  • C:\Program Files\Cisco\Orbital\osqueryd.exe

  • C:\Program Files\Cisco\Orbital\python\python.exe

 

macOS

Create exclusions for Orbital and related executable files in these default locations on macOS:

  • /Library/Application Support/Cisco/Secure Endpoint/Orbital/Cisco Orbital.app/Contents/MacOS/Cisco Orbital

  • /Library/Application Support/Cisco/Secure Endpoint/Orbital/Cisco Orbital.app/Contents/MacOS/orbitalhelper

  • /Library/Application Support/Cisco/Secure Endpoint/Orbital/Cisco Orbital.app/Contents/MacOS/orbital-node

  • /Library/Application Support/Cisco/Secure Endpoint/Orbital/Cisco Orbital.app/Contents/MacOS/osqueryd

  • /opt/cisco/orbital/python/bin/python

  • /opt/cisco/orbital/python/bin/python3

 

Linux

Create exclusions for Orbital and related executable files in these default locations on Linux operating systems:

  • /opt/cisco/orbital/bin/orbital

  • /opt/cisco/orbital/bin/osqueryd

  • /opt/cisco/orbital/python/bin/python

  • /opt/cisco/orbital/python/bin/python3