PSC: Slow performance occurring on a WAMP server with the PSC sensor installed.

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

• Application startup and login times measured in minutes rather than seconds without the PSC sensor installed
• Performance problem disappears if the sensor is placed in Bypass mode

Environment

• PSC: All versions
• WAMP server (Windows which consists of Apache, MySQL and PH): All Windows versions
• Microsoft Windows: All Supported Versions

Cause

These processes take additional cpu time when the sensor is in Active mode:

• httpd.exe
• mysqld.exe
• nscp.exe
• wampmanager.exe

 

Resolution

1. Edit the sensor's policy 
   • Enforce
   • Select the policy
   • Prevention tab
2. Change the sensor's policy to allow for processes in this path:
   • Process Operation Attempt=perform any operation
   • Action=Bypass
   • path: c:\wamp\**