Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 1 subscriber
  • Views 15181 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Performance configuration for software developers

nduda78

Has anyone else run into this issue? In my company we have a development department that does all the coding for our website and such. One of the biggest complaints which prevents us from running AV on their workstations is performance. In all cases of AV products, the development teams always complain that running code builds and compiles is so much slower with AV.

What is the optimal configuration for SEPP to apply to a computer that a software developer would use that has the least impact to performance? Even excluded subversion checkouts and playpens doesnt seem to help much.

Any pointers?

:19719


This thread was automatically locked due to age.
  • 0

    HI, 

    The first thing is to pin down which component of AV is slowing things down.  Once that's understood it's probably possible to improve things. It might be a quite slow iterative process but best to change things one at a time.  Between each suggestion see how things are:

    1. I would start by updating to the latest version, i.e. 10.0.
    2. Disable behaviour monitoring
    3. Disable live protection
    4. Disable suspicious files
    5. Disable Adware/PUAs
    6. Try just on-read scanning under on-access.
    7. Remove detoured, that is to do as follows: remove the path to the sophos dll from:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows \AppInit_DLLs

    and if on a 64-bit machine:
    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows \AppInit_DLLs

    If you only have one dll in each of the above, i.e. Sophos, it might be easier to set LoadAppInit_DLLs to 0 for both to make it easier to revert.

    Then restart the machine to take effect.

    8.Exclude C:\ under on-access exclusions

    9. Disable on-access

    10, Disable SAVService

    Starting at the top, which helps?

    Regards,

    Jak

    :19725
  • 0

    Does anyone else have other suggestions on improving performance on developers machines with Sophos?

    So far I have tried the following, but the developers still insist during builds Sophos accounts for 20% of all processor capacity:

     

    Exclude the following directories:
    C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\devenv.exe
    C:\Applications\ - global build directory used by developers

    C:\Program Files\PLSQL Developer\

    Detection changes:
    Disable live protection

    Disable suspicious behaviour detection

    Scheduled scan changes:

    Removed the scheduled Monday 12pm scan and replaced with a daily 11pm scan. (to mitigate the risk of relaxed on-access scans). 

    I was thinking of trying to exclude some file types completely. 

    PS. By default all on-access read only scanning and no on-access scanning of PUAs or remote files

    :23179
  • 0

    HI,

    I'd suggest using Process Monitor:
    http://technet.microsoft.com/en-us/sysinternals/bb896645

    If you leave that running for a while (when the machine seems to be slow) then under the "Tools" menu there are a number of "reports", such as the "File Summary".  This could help to discover files that could be excluded that would really help with performance.

    Regards,

    Jak

    :23205