# Exceptions for Cisco FireAMP

**URL:** <https://forum.ansible.com/t/exceptions-for-cisco-fireamp/45717>\
**Category:** Get Help\
**Tags:** aap, help, awx\
**Created:** [April 21, 2026, 1:46pm UTC](https://forum.ansible.com/t/exceptions-for-cisco-fireamp/45717 "2026-04-21T13:46:29Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![marek1712](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/marek1712/32/1971_2.png) [@marek1712](https://forum.ansible.com/u/marek1712)\
**Post date:** [April 21, 2026, 1:46pm UTC](https://forum.ansible.com/t/exceptions-for-cisco-fireamp/45717/1 "2026-04-21T13:46:29Z")

</div>

Hi.

We’re running AWX 24.6.1 on K3s (see [GitHub - kurokobo/awx-on-k3s: An example implementation of AWX on single node K3s using AWX Operator, with easy-to-use simplified configuration with ownership of data and passwords. · GitHub](https://github.com/kurokobo/awx-on-k3s)), hosted on Rocky Linux.

For quite some time now, Cisco FireAMP’s been affecting whole application badly (to the point that couple of simultaneous jobs can error out, despite quite a few resources assigned to it). Even Cisco themselves are aware of the resource usage - see [https://www.ciscolive.com/c/dam/r/ciscolive/global-event/docs/2025/pdf/TACSEC-2022.pdf](https://www.ciscolive.com/c/dam/r/ciscolive/global-event/docs/2025/pdf/TACSEC-2022.pdf).

It’s really hard to find proper documentation on what to exclude. Similar apps have these on the list:

- folders:  
/var/lib/docker/  
/var/lib/containerd/  
/var/lib/rancher/k3s/

- processes (alongside with child processes):  
/usr/bin/python3  
/usr/bin/python  
/usr/bin/ansible-playbook

Is there any documentation listing best practices for exclusions (either for AWX or AAP)?