Delayed opening of Internet Explorer pages after September 29 CIDS definitions update

book

Article ID: 170274

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

Following the 170929.021 CIDS definition update for Symantec Endpoint Protection (SEP) 12.1 and 14 clients, opening web pages in Internet Explorer 11 takes 20 seconds or longer.

Cause

Our core IDS (CIDS) engine scans JavaScript buffers while loading web pages. Although a cap on the time spent when processing these buffers was introduced with CIDS 16.1.4, when a site is particularly Javascript-heavy, the cumulative delay due to the scanning action results in an observable delay of about 20 seconds.

Environment

SEP (all versions)

Internet Explorer

Resolution

This issue is fixed with an adjustment to the infield Browser IPS Toolkit detection technology in the following updated CIDS content:

  • SEP 12.1 - November 1st, 2017 r1
  • SEP 12.1 RU2+ - November 1st, 2017 r11
  • SEP 14  -November 1st, 2017 r21
  • SEP 14 RU1 - November 1st, 2017 r200

We are continuing to look at additional optimizations/adjustments to this technology, which we plan to deliver in the CIDS 16.2 engine update.

 

Attachments