Data Loss Prevention

 View Only
Expand all | Collapse all

EDPA.exe high memory utilization

  • 1.  EDPA.exe high memory utilization

    Posted May 02, 2018 07:07 AM

    I have observed that EDPA.exe is utilizing high memory, Sometime It goes up to 90% of the todal memory.



  • 2.  RE: EDPA.exe high memory utilization

    Posted May 02, 2018 08:40 AM

    Check the solution provided below and see if this helps you:

    https://www.symantec.com/connect/forums/edpaexe-high-cpu-and-memory-leak-when-debugging-visual-studio

    Thanks!



  • 3.  RE: EDPA.exe high memory utilization

    Posted May 04, 2018 05:06 AM

    Application File Access control is already disabled on the Agent configuration. Local Drive is also unchecked.



  • 4.  RE: EDPA.exe high memory utilization

    Posted May 05, 2018 03:48 PM

    Does it perhaps occur when there is an AV scan?



  • 5.  RE: EDPA.exe high memory utilization

    Posted May 07, 2018 01:33 AM

    Should I exclude the AV from monitoring ? I haven't yet.



  • 6.  RE: EDPA.exe high memory utilization

    Posted May 07, 2018 02:47 AM

    It's worth a shot to be honest. I've seen an AV corrupt an upgrade by blocking an SQL Express upgrade as it detected it as virus-like activity, as well as seen it completely stop services for no reason.



  • 7.  RE: EDPA.exe high memory utilization

    Posted May 07, 2018 05:01 AM

    Maybe is a monitoring from or to AV.

    For exclude from AV: https://support.symantec.com/en_US/article.TECH220235.html

    For exclude DLP monitoring to AV: Add your AV in Application monitoring and then, uncheck all monitoring profiles.

     

    Regards



  • 8.  RE: EDPA.exe high memory utilization

    Posted May 07, 2018 05:13 AM

    No, you exclude that process from AV scanning and see if this resolves it.



  • 9.  RE: EDPA.exe high memory utilization
    Best Answer

    Posted May 11, 2018 02:15 AM

    I have excluded AV from monitoring. Also excluded .exe from monitoring in Default Agent configuration. Now I see edpa.exe memory utilization reduced to less then 5%.



  • 10.  RE: EDPA.exe high memory utilization

    Posted May 11, 2018 03:08 AM

    That's excellent! Not sure why, but I've seen processes ramp up usage when being actively scanned by an AV. My preference was to always ask that these specific processes be excluded from active scanning, but still be part of a scheduled scan. This way you're protected.

    Thanks!



  • 11.  RE: EDPA.exe high memory utilization

    Posted May 11, 2018 03:22 AM

    Thanks CraigEV, really appreciate your responses, It helped me to identify and resolve the issue.

    Cheers,