Endpoint Protection

 View Only
  • 1.  SEP> RDP Keystroke Lag

    Posted Sep 15, 2014 01:39 PM

    We have a client that has about 50 Virtual Desktops running Windows 7 Enterprise. In the past couple of months they have been complaining about a lag when typing (does not matter what application). They are connected to the VD via a HP thin Client running Windows 7 embedded. I setup a ping test from the VD to the users thin client and asked the user to screenshot the next time they experience a lag. Sure enough the ping times were all <1ms except for one ping at > 3500ms. (A single ping at 3500ms was enough to delay typing) I started to check the ping times to her VD from another server and confirmed that this is a pretty consistent occurance. I have isolated this to a networking on the actual VM. (I see the same lag from another VD on the same ESX Server) If I disable the SMC client these sporatic > 3000ms ping time disappear.

    I upgraded SEP from 12.1 MR2 to 12.1.4100.4126 over the weekend and she is still having issues. 

    -VMWARE is 5.5 Fully Patched

    -Server(s) are Poweredge T710 completed firmware updated.

    -Network adapter is VMXNET3

    -Workstation is completely patched with all Windows Updates

    Any ideas would be much appreciated.



  • 2.  RE: SEP> RDP Keystroke Lag

    Posted Sep 15, 2014 01:43 PM

    What if you just disable the firewall as a test?



  • 3.  RE: SEP> RDP Keystroke Lag

    Posted Sep 15, 2014 01:48 PM

    I sent a command to one of the client machines (disable network threat protection) having the issue and it is still showing high ping times at least once every couple of minutes. I am waiting to get back on the users machine to right click on the SEP icon and disable the entire client. On another test machine (another VD on same ESX Server) that seems to completly remediate the high ping time. I am still trying to narrow this down. thanks for your response.



  • 4.  RE: SEP> RDP Keystroke Lag

    Posted Sep 15, 2014 03:51 PM

    I 100% confirmed I disable the client by right clicking on the SEP icon and click disable SEP. Max ping time does not go above 6ms in the last 2 hrs.



  • 5.  RE: SEP> RDP Keystroke Lag

    Posted Sep 15, 2014 03:59 PM

    It probably disabled the firewall. You can open the GUI to confirm, it will tell you what exactly which component is disabled.

    The other thing you can try is upgrading the client to the latest version, 12.1.4.1b.

    However, I would probably give Symantec a call and have them look at this to see if they know of anything.

    12.1.4.1b was only supposed to fix the client ADC vulnerability.



  • 6.  RE: SEP> RDP Keystroke Lag

    Posted Sep 15, 2014 04:47 PM

    Latest update> If I right click on the SEP icon and update the policy I can reproduce the latency over and over again. Every time it updates I get a 2000ms ping. On the phone with support now.



  • 7.  RE: SEP> RDP Keystroke Lag

    Posted Sep 16, 2014 07:56 AM

    Check back with an update if you can



  • 8.  RE: SEP> RDP Keystroke Lag

    Posted Sep 16, 2014 08:33 AM

    For now we are testing with the Firewall Module removed and IPS still intact. They definetly have some type of bug in the firewall component that causes this.