Video Screencast Help

Why Endpoint Protection take a lot of memory and power?

Created: 28 Jun 2013 | 12 comments

Hello!

The first trouble.

On my work (110 clients) Endpoint Protection take a lot of phisical memory (600 mb silent - dont showing in tasklist, without personal process like ccsvchst.exe, smc.exe). You can see in screenshots. Is it normal?

When I uninstall Symantec - all work fine. Screenshot.

After reinstall Symantec physical memory take more bigger when without it. Screenshot.

This level of loading without the programs, when I start to run other programs, the memory ends.

The second problem.

I cant work! My PC very slow working. Flashlight HDD often light. Others programs slower runs.

I notice, that when i using only auto protection (files antivirus) (screenshot) - all ok, but when i turn on netwok protection (screenshot) - computer start slowly work.
Pc have not bad complectation: Intel Core 2 Duo, 2 Gb, 512Vb Video, 1 Gb lan...

Before this bugs wasnt on 10.7 Symantec Endpoint Protection.
Current version on screenshot ().

If somebody know Russian, I do not mind to go for it.

Operating Systems:

Comments 12 CommentsJump to latest comment

.Brian's picture

Doesn't seem normal, especially for 12.1.

You said this affects ALL clients? And it happens continuously?

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Rafeeq's picture

From the screen shot, the highest CPU usage is the last process, with less KB, that name is in Russian, what process is that ? SEPM?

 

Please check this document if SEPM is on VM

The Symantec Endpoint Protection Manager is very I/O intensive and subject to random spikes of heavy resource usages in dealing with clients, HTTP traffic and disk I/O transactions. As a result, a minimally designed VMware may suffer performance issues and “fall behind” in logs, requests for content / policies and definitions. With this in mind, Symantec STRONGLY recommends the following settings as a “functional minimum” set of system requirements:

http://www.symantec.com/business/support/index?page=content&id=TECH132456&profileURL=https%3A%2F%2Fsymaccount-profile.symantec.com%2FSSO%2Findex.jsp%3FssoID%3D1372787225902xkOKFq0kKnlU8vI89cu43pql1L42O1ecjM2tC

sandra.g's picture

If I had to guess, I would think that just after installation it may be doing a full disk scan...

Endpoint Protection take a lot of phisical memory (600 mb silent - dont showing in tasklist

If it doesn't show in the task list, how do you know it's using 600 MB of RAM? I second Rafeeq's question about the process using 99% CPU.

Ccsvchst.exe is SEP's main process, and that doesn't look that bad (if I'm reading the images correctly). Wuauclt.exe (Windows Update Automatic Update) is sure taking a lot of memory though.

Before this bugs wasnt on 10.7 Symantec Endpoint Protection.

Does this mean you were using SAV 10.1, or SEP 11.0.7? Do your scans complete, and if so, has anything been detected?

I saw your note up there, but verify that the systems meet the minimum system requirements: System Requirements for Symantec Endpoint Protection, Enterprise and Small Business Editions, and Network Access Control 12.1.2 and 12.1.3

sandra

Symantec, Information Developer
Installation, Migration, Deployment and Patching
User Protection & Productivity, Endpoint Protection

Don't forget to mark your thread as 'solved' with the answer that best help

Ivan Tim's picture
Rafeeq The last process, with less KB, that name is in Russian - it is free (unused) CPU. It's normal for all russian OS (WinXP). This process is everywhere: home, work...
And I don't work with VM. One PC-one OS.
 
sandra.g I would be happy if it were so easy :) But I see when SEP doing a full scan, policy show progress.
 
Why 600 Mb of RAM - just the sum of all the processes (4 column) are not the same as the digit at the bottom of the Task Manager (Выделение памяти: XXXXМб)
 
Others process (WSUS) I ignore. Because before and after installation (and after 3 or more day after) using of RAM noticeably grows.
 
I checked how much memory is consumed by secretly on different PCs - 250-600 (my computer more than others).

I ignore the configuration of the PC too, because SEP 11.0.7 (I made a mistake about 10.7) was installed on the same computer (I mean all of 110 PC). As they say colleagues, worked much better on 11.0.7. I have not seen on 11.0.7 (recently moved to this job), but I can see that 12.1.2 is not working properly.

Scan finds nothing (it's wrong way). Reinstall Windows don't help (before intallation SEP 350 max, after 550-600). Now I'll check on Win7.

I think the computer starts to run slower with full protection, because many programs running at the same time and going strong load over the network. I admit it, so on most PCs only setup file protection. But why so much RAM is taken - a mystery.

Yet there is an idea - try to go back to 11.0.7 if I can find the distributions. Will it set the old client to connect to the new server console 12.1.2?

Ivan Tim's picture

Great! I had found only 11.0.4, but it version work also perfectly as 11.0.7(colleagues were right). What comes out? 12.1.2 does not work properly?

I have not yet tested on Windows 7, maybe the problem is only on WindowsXP?
Anybody installed 12.1.2 with WinXP?

2013-07-03 11_05_51-Greenshot_12.1.2.png 2013-07-03 11_39_02-Greenshot_clear_off wsus.png 2013-07-03 12_17_51-Greenshot_11.0.4_off wsus.png
.Brian's picture

Running 12.1.3 on an XP box and my footprint is 53 MB.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Ivan Tim's picture

12.1.3 version has the same problems. I decided to roll back all clients to version 11. On all computers where I sampled 12 version was taking more memory and slow running computer.
Thank you all, if you have any suggestions, I do not mind.