App Control: SAP Application Install Failure or Performance Issues

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

• SAP application fails to install, despite endpoint being in Local Approval mode.
• SAP application files showing in Agent cache as being Approved locally.
• No Block Events in the Console for SAP.

Environment

• App Control Server: All Supported Versions
• App Control Linux Agent: All Supported Versions
• Linux: All Supported Versions

Cause

Noisy processes causing performance issue, preventing successful installation or functionality of SAP application.

Resolution

1. Confirm the Linux Agent Exclusions added to all other security products (ClamAV, Defender, etc) in the environment.
2. Collect Linux Agent Performance Logs while recreating the issue.
3. Open a case with Support for Agent Log analysis to determine mitigation steps for noisy processes.