If a company policy forces you to install an antivirus/malware scan tool
on Linux servers which IPA directories should be excluded because a
severe performance impact would be very likely?
I would start with:
/var/lib/sss
/etc/dirsrv/slapd-LINUX-MYDOMAIN-AT
What else?
Cheers,
Ronald