Printing to Canon printers is slower with Symantec Endpoint Protection in installed

Products

• Endpoint Protection

Issue/Introduction

When you disable Application and Device Control in the SEP GUI by clicking on Change Settings >  Configure Settings on the Client Management line > untick the option "Enable Application and Device Control" the printing is much faster.

The System Lockdown feature of Endpoint Protection may have been enabled recently in your environment by adding an MD5 hash to the blacklist on your Advanced Threat Protection (ATP) appliance.

Cause

Some processes not reacting well to the hooking of our Application and Device Control DLL.

Resolution

- Check with Process Monitor for which process is taking the most CPU utilization during the printing task by checking the stack summary in Tools Stack\Summary. The Sysfer.dll may be taking up a lot of the CPU.



- Setup an Application control exclusion on the C:\Windows\system32\PrintIsolationHost.exe process to fix the issue

- In other cases, setting up an Application control exclusion for %[SYSTEM]%\spoolsv.exe and %[WINDOWS]%\splwow64.exe in the exception policy has fixed the issue as well.