Performance issue on Citrix endpoints running Deltek Products

Products

• Carbon Black Cloud Endpoint Standard
• Carbon Black Cloud Enterprise EDR
• Carbon Black Cloud Workload
• Carbon Black Cloud Managed Detection and Response

Issue/Introduction

Citrix based Windows OS endpoints experience performance issues like slow loading when running the Deltek Cobra application.

Environment

• Carbon Black Cloud Endpoint Standard: Current Version
• Carbon Black Cloud Enterprise EDR: Current Version
• Carbon Black Cloud Sensor: All Supported Versions
• Citrix Virtual Desktop: Supported Versions
• Microsoft Windows OS: Supported Versions
• Deltek Cobra Application

Cause

Carbon Black Cloud appears to have an interoperability issue with the Citrix Virtual Desktop client as it attempt to load applications like the Deltek Cobra product.

Resolution

Creating Event Reporting and Sensor Operation exclusions for the Deltek Cobra application paths help avoid the interoperability performance issue.

Additional Information

• Here an example of what can be included in a policy based Event Reporting and Sensor Operation exclusion rule:

  Type: All Reporting and Sensor Operations Exclusions
  Select a process type: Process
  Process File Path: C:\program files (x86)\deltek\cobra\deltekcobra.exe
  Apply exclusion to descendant processes
  Save