Video Screencast Help

Symantec Endpoint Firewall slows Hyper-V Virtual machines network throughput

Created: 20 Nov 2013 • Updated: 20 Nov 2013 | 6 comments

Hello,

I've recently been through some migrations for clients from physical machines to virtual machines.   The speed difference without Symantec Endpoint firewall installed can nearly double the copy speeds.   The antivirus doesn't seem to have any significant impact on speed.   Using Windows native firewall works fine.   It is only the Symantec Endpoint firewall that slows the network throughput significantly.

I've changed the offload on the nics and I've updated the nics - firmware/drivers.

I am using Windows Server 2012 R2 Datacenter with Windows Server 2012 R2 standard hyper V VMs.   I'm using 12.1.4 of Endpoint.

Operating Systems:

Comments 6 CommentsJump to latest comment

.Brian's picture

There was a similar thread on this here:

https://www-secure.symantec.com/connect/forums/sep-1214-extremely-poor-firewall-performance

I would suggest opening a case to get this looked at. In the meantime, you may need to temporarily disable the firewall. This was also an issue back in 12.1 RU2 MP1, which was fixed in RU3.

I've also seen a few other threads on this but have not seen a resolution yet.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

boe1's picture

Thanks.  We are using Windows Firewall on all of the VMs for now.   I've posted this issue a while back but haven't heard of any resolution.   I'm just hoping Symantec is working on it as I find the Symantec firewall easier to configure fo my needs but the Windows one will do as we have Sonicwalls well configured at each location.

I forgot to mention - Symantec Endpoint firewall doesn't impact the performance on the physical machine, just the virtual machines hosted on it that run SEP firewall.

boe1's picture

Hello,

I just discovered a similar issue with Teamed / Trunked / LAG nics.   Symantec Endpoint firwall will also slow down a LAG just as badly as it impairs traffic with Hyper-V.

Mithun Sanghavi's picture

Hello,

Look at this Thread with similar query: 

https://www-secure.symantec.com/connect/forums/sep-1214-extremely-poor-firewall-performance

I would suggest you to create a case with the Symantec Technical Support Team and submit the following logs.

1) SymHelp with advance debug. - http://www.symantec.com/docs/TECH207795

2) WPP Logs - http://www.symantec.com/docs/TECH171176

3) XPerf logs - http://www.microsoft.com/en-US/download/details.aspx?id=39982

Check these Steps below:

How to create a new case in MySymantec

http://www.symantec.com/business/support/index?page=content&id=TECH58873

Phone numbers to contact Tech Support:-

Regional Support Telephone Numbers:

  • United States: 800-342-0652 (407-357-7600 from outside the United States)
  • Australia: 1300 365510 (+61 2 8220 7111 from outside Australia)
  • United Kingdom: +44 (0) 870 606 6000

Additional contact numbers: http://www.symantec.com/business/support/contact_t...

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

SameerU's picture

Hi

Can you please upgrade to SEP 12.1.4 as there are many fixes

Regards

 

.Brian's picture

Hey SameerU, he is already running 12.1.4. Please read before posting unhelpful info.

Brian

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.