Endpoint Protection 14.3 ccSvcHst.exe frequent crashes on DC servers

Products

• Endpoint Protection

Issue/Introduction

You notice SEP installed on DCs are not updating, looking at the Event viewer the client service crashes frequently

Event 1000 showing a lots of events as below:

 

Environment

Windows Server DC.

SEP 14.3 + builds

Cause

SepMasterService consuming all heap memory and engines not handling memory allocation failure well.

Resolution

As workaround you might try to add memory monitor settings as per: https://knowledge.broadcom.com/external/article/170255/endpoint-protection-client-fails-to-upda.html

You might use different value

MemoryMonitor = 500 (default 350)
MemoryMonitorFreq = 1 (default 8)
MemoryMonitorRetry = 0 (default 60)

 

If the SepMasterService crashes so often, please use a Frequency of 1-2 hours instead of default 8. the Memory Monitor  of 500 instead of 350.

 

If the SepMasterService keeps crashing even with memory Monitor settings above, follow the workaround described below:

https://knowledge.broadcom.com/external/article/171244/endpoint-protection-ccsvchstexe-process.html

 

Additional Information

CRE-9640