SEPM Console is too slow while going to different tabs.
Updated: 18 Sep 2010 | 19 comments
We are using Dual Xeon processor server with 2 GB memory 2 40 GB scsi HDD with raid1 . Windows 2k3 sp2 Operating system. SEP11MR4.
when I move from one tab to other on SEPM console it is very slow and also when i click on a group it takes too much time to buiild client list.. Currently we have only 400 sep clients.
what can I do to improve the performance. I have installed the embeded database on this server.
Discussion Filed Under:
Comments
The cause may be the SEPM has
The cause may be the SEPM has exhausted it's Java Heap Cache (run out of memory)
To adjust the Symantec Endpoint Protection Manager heap size:
1. Click Start > Run.
2. In the Run dialog box, type regedit, and then press Enter.
3. Locate the following registry key:
* HKLM\SYSTEM\CurrentControlSet\Services\semsrv\Parameters\
4. Locate the following keys:
* JVM Option Number 0
* JVM Option Number 1
5. Adjust the key values upward, and match the key values.
* For example, to create a 1 GB static heap, set JVM Option Number 0 to -Xms1024m, and set JVM Option Number 1 to -Xmx1024m.
6. Exit Regedit, and then click Start > Settings > Control Panel > Administrative Tools.
7. In the Services dialog box, right-click Symantec Endpoint Protection Manager, and then click Restart.
http://service1.symantec.com/SUPPORT/ent-security....
Thomas
Still the same thing . no
Still the same thing . no increase in performance.
What is the databse, is it
What is the databse, is it enbedded or the internal?? Try to install FstCgi
Regards'
Ajit Jha
Technical Consultant
STS
And the cause may be becuase
And the cause may be becuase it's just plain SLOW, like most JAVA apps.
I've tried everything for 8 months, no relief. IT's slow, it's a pain, and often when clicking say a policy to modify, I get a blank window and have to close, open, close, open until the window has the policy in it.
I'll be blunt - I hate Java, it's not secure, when you update JAVA for security reasons, it breaks the installed apps, (including the SEM console) it's painfully slow, and so far, on XP, Vista and even Server2003, no one has been able to make the SEPM console work faster than a painfully slow crawl, often needing to repeat clicks multiple times.
We can't blame the OS or my workstations because I run the console from the following and it's just as bad on each, although worst with Vista, then XP, then 2003)
Vista - terrible slow, freezes a lot, often get blank windows when opening policies, close and reopen until it shows something.
XP about the same, not quite as slow, but still must wait a lot when changing tabs
Server 2003 (running from the SEM server itself) slow, faster because it's VM and well endowed, but still not near as fast as a non-Java application.
The kicker, I've had to put the kabash on any JAVA updates because updating JAVA can cause the console to stop working.
(I'm trying to gripe enough that Symanted re-writes it in some GOOD fast clean secure language, even C++ would be better LOL!)
My sites - http://theamcpages.com & http://antique-engines.com
Toy:
Shadow:
FastCGI
Have you tried installing FastCGI. It is present in CD2 folder.
It will increase the performance of the first three tabs a lot.
VMWARE-- SEP 12.1 vs McAfee vs Trend Micro
free up your virtual memory
free up your virtual memory on the SEPM server / increase the physical & virtual memory simulteniously.
pls see memory consume when
pls see memory consume when other programe is running
Like most of em said it:
Like most of em said it: Install FastCGI. There is also another way to bypass PHP completely, but it's pretty complicated and has to be done by someone who has actually done the same at least 10 times and gotten a proper hang of the correct procedure.
You could try to increase the Virtual Memory and add a PAE switch to the server if not already added to make it run a bit faster.
@ Shadowspapa: agree with you on that, but have you seen SEP 12 SBE? It's almost completely based on DotNet.....VERY VERY fast and sexy if I may add ;)
Abhishek Pradhan, PMP, MCT
Consultant | Microsoft Corp.
Blog: http://blog.abhishekpradhan.net | SIG Lead - Pune IT Pro (Microsoft Pune User Group) | http://www.puneusergroup.org
All these help, but here is another option that worked for us
Like everyone has said, Java is just slow. Making the modifications listed above should help, but for our environment (large w/ MANY groups and locations) it was still very slow (like 1 or 2 minutes to pull up the tabs).
The "fix" we worked out was to modify the sesm.xml file:
Start-Run, type %temp% to pull up your default temp folder. Locate the sesm.xml file. Edit the locationCounting tag to be false like below:
- <sesm>
<login locationCounting="false" option="less" vistaWarn="false" />
<displayFilter mode="all" pageSize="1000" showOnlineStatus="true" />
</sesm>
Good luck -
Abhishek no I have not seen
Abhishek no I have not seen 12. Yes, you can say that. LOL - well said!
I put in the fast-cgi months ago and literally saw zero, none, nada, not one bit of increase in performance. Nothing at all changed.
We're running 4 gig RAM and with VMWare, the way we have things set, if any device needs more RAM or processor, it gets it automatically. We've got as much as is needed and the minimums are far beyond the recommended. So it's not a memory or processor thing in our case.
ALso like I say, we've got 2 SEM servers, the performance is the same if you run the console ON the server, or on a workstation pointing to either server. No impact, no speed change.
I dunno, it's just plain a pain here.
We dealt with Java where I used to work, and even the developers there admitted that JAva was slow compared to almost anything else.
Symantec simply needs to get away from Java. The other reason - Java has frequent security issues and updates often break things, including the console. More than once I've had to strip a machine of all Java and reinstall and older version.
There's some interesting things to try in this thread, though. Keep the ideas coming, IMO.
My sites - http://theamcpages.com & http://antique-engines.com
Toy:
Shadow:
I tried to install
I tried to install fastcgi.exe.
everything went fine except at command prompt when i entered the command
"cscript fcgiconfig.js -set -section:"PHP"-EnvironmentVars:PHP_FCGI_MAX_REQUESTS:10000
the following error occured.what could be the problem.
C:\WINDOWS\system32\inetsrv>cscript fcgiconfig.js
-set-section:"PHP"-EnvironmentVars:PHP_FCGI_MAX_REQUESTS:10000
Microsoft (R) Windows Script Host Version 5.6
Copyright (C) Microsoft Corporation 1996-2001. All rights reserved.
Error: Unknown verb
Usage:
List settings:
fcgiconfig.js -list [-section:"foo"]
Set/Delete setting:
fcgiconfig.js -set -section:"foo" -<property>[:value]
Get setting:
fcgiconfig.js -get -section:"foo" -<property>
Add new script mapping:
fcgiconfig.js -add -section:"foo" -extension:"bar" -path:"<path>"
[-site
:NNN]
Remove a script mapping:
fcgiconfig.js -remove -section:"foo"
Apply pre-existing ini settings to metabase:
fcgiconfig.js -syncini
Something you might want to look at...
Bijay,
I noticed when I set the "View:" to anything except "default view", it was very slow. When you set the View back to "Default View" then it would speed back up.
I know this wasn't a real technical fix and you may already be set to Default, but it really helped me in SEPM.
"Trust, but verify."
Is the OS 64bit? I've seen
Is the OS 64bit?
I've seen the same thing before. A customer had a similar hardware with 64bit OS with a separate SQL database on another server and believe me their SEP manager was working slower than my SEP Manager in VMware with 1GB memory and embedded database :)
Best regards,
Bekir Burak Durmaz
No its a 32 bit windows 2003
No its a 32 bit windows 2003 sp2 server
Hi try to install fastcgi
Hi try to install fastcgi then follow this procedure belo hope should help you
1. Get the fcgisetup.exe in the SEP CD2 installer then install it on the SEPM server that encountering the said problem.
2. After the installation is done navigate to C:\Windows\System32\inetsrv
3. Open fcgiext.ini with a text editor.
4. Add the following lines to the bottom of the file:
php=PHP
[PHP]
ExePath=D:\Program Files\Symantec\Symantec Endpoint Protection Manager\PHP\php-cgi.exe
Arguments=-c "D:\Program Files\Symantec\Symantec Endpoint Protection Manager\Php\php.ini"
InstanceMaxRequests=10000
EnvironmentVars=PHP_FCGI_MAX_REQUESTS:10000
RequestTimeout=500
ActivityTimeout=900
5. Save the changes to the file.
6. Now navigate to <drive>:\Program Files\Symantec\Symantec Endpoint Protection Manager\Php\php.ini
7. Right click on php.ini and uncheck "Read only" and click on OK. Then open the file and add the following lines to the bottom of the file:
fastcgi.impersonate=1
fastcgi.log=0
8. Save the changes to the file and close it. Again open properties php.ini and check the "Read only" box and click on OK.
9. Click Start>Control Panel>Administrative Tools>Internet Information Services (IIS) Manager
10. In the navigation tree, under Web Sites, under Default Web Site, right-click Reporting, and then select Properties.
11. On the Virtual Directory tab, click Configuration. On the Mappings tab, under Application extensions, click the executable path, for the extension .php and then click Edit.
12. Change the path to C:\windows\system32\inetsrv\fcgiext.dll
Or %WINDIR%\system32\inetsrv\fcgiext.dll
Where you replace %WINDIR% with the definition of %WINDIR% on your computer.
:-)
tried but no improvements.
tried but no improvements. Now sometime I get fast cgi error.
I have installed fastcgi many
I have installed fastcgi many months ago.
The view is default.
The console is so slow it's horrible to use, takes a LOT of time, especially in emergencies, at times totally timing out.
Every couple of days I have to log out, close it and re-open it, it helps but is still terrible slow.
At times, I click on policies and it shows blank pages. I close using the X, try again, usually after 3 or 4 tries it will show the policy.
Changing tabs takes 15., 20 sometimes more seconds.
That's crazy.
Get rid of JAVA - DUMP JAVA, use a real language - something fast!
My sites - http://theamcpages.com & http://antique-engines.com
Toy:
Shadow:
yes Java is very slow use any
yes Java is very slow use any other language .
Improving SEPM Performance with the SEM_GETUSN
Try this out may be it wll help you out i did this
and to certain extent it improve the perfomace
http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/254ca2c7b73db42a80257678005e481d?OpenDocument
Saqib Alam|Senior Systems Engineer|Symantec Technical Specialist|
Would you like to reply?
Login or Register to post your comment.