Whether agent folder needs exclusion in Antivirus? Do you have digitally signed binaries?

Technically not required as we digitally sign all the agent binaries however there are cases where we observed antivirus marking agent binaries as false positive and in such case you may have to exclude the folders or inform specific anti-virus vendor to remove such false positives.

SapphireIMS agent or agentless node has capability to install any software or execute custom scripts which gets downloaded or copied to target machines. Those installers or scripts may give the false alerts and may force to exclude such repository at target end points.