Endpoint Protection Small Business Edition

 View Only

  • 1.  SemSvc.exe using alot of CPU, can't add httdp.exe to DEP

    Posted Oct 21, 2014 02:54 PM

    We have been working with DELL and they state our problem with performance issues on our 3mo old server could be related to Symantec Endpoint Protection. DELL stated that SemSvc.exe has a very long wait time and is using a lot of virtual memory. They recommend we uninstall it immediately.

    So I have been searching around and came acrross this topic.https://www-secure.symantec.com/connect/forums/semsvcexe-using-alot-cpu-how-do-i-fix-it  that lead me to this Symantec KB article http://www.symantec.com/business/support/index?page=content&id=TECH168248

    So it says to add httpd.exe to DEP but when I tried doing that it gives me an error:

    "This program must run with data execution protection (DEP) enabled. You cannot turn off DEP for this programl".

     

    Any ideas? We are using SEPM 12.1.4104.4130 on server 2012r2.



  • 2.  RE: SemSvc.exe using alot of CPU, can't add httdp.exe to DEP

    Posted Oct 21, 2014 02:57 PM
    Have you called Symantec? Have you tried 12.1.5? Just came out a few weeks ago.


  • 3.  RE: SemSvc.exe using alot of CPU, can't add httdp.exe to DEP

    Posted Oct 21, 2014 03:01 PM

    How many clients are managed by SEPM?

    are your clients configured in Push mode or pull mode?

    how often do you update defintiions to clients?



  • 4.  RE: SemSvc.exe using alot of CPU, can't add httdp.exe to DEP

    Posted Oct 21, 2014 03:41 PM

    We have 7 clients. Sorry stupid question, how can i tell if it's in push or pull mode? I beleive definition run daily.



  • 5.  RE: SemSvc.exe using alot of CPU, can't add httdp.exe to DEP

    Posted Oct 21, 2014 03:55 PM

    check it on SEPM , this is how you configure it,

    http://www.symantec.com/business/support/index?page=content&id=HOWTO55197



  • 6.  RE: SemSvc.exe using alot of CPU, can't add httdp.exe to DEP

    Posted Oct 21, 2014 04:02 PM

    I'm on the phone with Symantec right now. It was set to push mode and they requested it be changed to pull. She also had me change the heartbeat from 5min to 15 min and virus definitions to be updated daily as they were set to every 4hrs.

    I'm downloading 12.1.5 right now as well. I will keep everyone posted



  • 7.  RE: SemSvc.exe using alot of CPU, can't add httdp.exe to DEP

    Posted Oct 21, 2014 04:07 PM

    Just the same thing what I thought, there is a lot of difference with PUSH and PULL mode, put it on PULL mode 4 hours, check the usage and that too with 12.1.5 you should be all set..