Slowness in MPS Protected Guest VMs

Products

• VMware vDefend Firewall
• VMware vDefend Firewall with Advanced Threat Prevention

Issue/Introduction

Under a burst of events beyond the supported scale for MPS, guest VMs protected by MPS exhibits slowness.

Environment

Security Services Platform 5.1.0 (SSP 5.1.0)

Cause

Burst of events from multiple guest VMs results in partial resource exhaustion on the SVM. This leads to reduction of responsiveness of the guest VMs.

Resolution

NOTE: This issue is fixed in SSP 5.1.1

To improve the performance of the guest VMs, following needs to be done.
Identify the MPS profile(s) that protects the affected guest VM(s)

1. The MPS profile can be found in NSX Manager under Security → IDS/IPS & Malware Prevention → Profiles → Malware Prevention

2. Disable the "scripts" in the MPS profile(s) identified in Step 1.

 

Or

Upgrade to SSP 5.1.1