High CPU Utilization Or Slow Performance On Servers And File Server
search cancel

High CPU Utilization Or Slow Performance On Servers And File Server

book

Article ID: 284868

calendar_today

Updated On:

Products

Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

High CPU utilization or slow performance noted:
  • On servers
  • On file servers
  • Consistent intervals (evenings, weekends, set time)

Environment

  • Endpoint Standard (formerly CB Defense) Sensor: All Supported Versions
  • Microsoft Windows: All Supported Versions

Cause

Performance impact may be more pronounced on servers or file servers that have:
  • Large amount of executable files are being stored
  • Backup application being run from or against the machine

Policy options that could have a performance impact:
  • Scan files on network drives
  • Scan execute on network drives
  • Delay execute for cloud scan
  • On-Access File Scan Mode - set to aggressive

Resolution

  1. Verify vendor recommended AV exclusions are in place / best practices are being followed
  2. Verify backup applications are properly excluded, these applications in particular will have a performance impact as each file will be touched and hence  have hashes and reputation created / evaluated
  3. Consider rolling back some of the policy options per your organizations security posture / requirements
  4. Verify / test latest available sensor
  5. Increase hardware resources