Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 1 subscriber
  • Views 8170 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Endpoint Security 9.7 / CA Arcserve R16 Performance Issue

Saleem

Hi

I have installed sophos endpoint security 9.7 in windows 2008 r2 sp1 server.

we are using ca arcserve r16 with IBM tape librabry connected via fibre -8Gb

With On Access Scanning Enabled with Check Files on Read Mode,

the backup is performing at 300-500mb/sec 

With On Access Scanning Disabled the backup is performing at 5000-6000mb/sec.

I got a list of files (15 Exe Files) and two Folders where the CA Arcserve Backup Software is located has to excluded in the antivirus software where provide from CA Support Team. 

Even after set this files and folders in the exclusion list in Sophos, the backup is performing at very low speed.

Please send me a solution at the earliest to overcome this problem.

Regards

Saleem

Bin Dasmal Group

:20617


This thread was automatically locked due to age.
Parents
  • 0

    I apologize for not updating this earlier, but we did find which processes need to be excluded using the ExcludedProcess method.  You will need to re-apply these exclusions each time there is a major update to the Sophos product, which is quite a pain in the you know what.  If someone has a way that we will not need to re-apply these after major updates, we would appreciate hearing.

    When we were using Symantec Endpoint Protection we didn' have to do this or several other things that we have to do with Sophos to maintain system performance and protection.  Not sure it was worth the savings in the long run.

    Modify the following registry key to include the following processes:

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SAVOnAccess]

    "ExcludedProcess0"="carunjob.exe"
    "ExcludedProcess1"="UnivAgent.exe"
    "ExcludedProcess2"="caagstart.exe"
    "ExcludedProcess3"="DBENG.exe"
    "ExcludedProcess4"="casdscsvc.exe"
    "ExcludedProcess5"="cadiscovd.exe"
    "ExcludedProcess6"="jobeng.exe"
    "ExcludedProcess7"="casmgmtsvc.exe"
    "ExcludedProcess8"="msgeng.exe"
    "ExcludedProcess9"="Catirpc.exe"
    "ExcludedProcess10"="caserved.exe"
    "ExcludedProcess11"="tapeeng.exe"
    "ExcludedProcess12"="Ofant.exe"
    "ExcludedProcess13"="dbaexchr.exe"
    "ExcludedProcess14"="ntagent.exe"
    "ExcludedProcess15"="ofawin.exe"
    "ExcludedProcess16"="OFANT.sys"
    "ExcludedProcess17"="dbasvr.exe"
    "ExcludedProcess18"="Catirpc.exe"
    "ExcludedProcess19"="tapeeng.exe"
    "ExcludedProcess20"="Caloggerd.exe"
    "ExcludedProcess21"="dirwatcher.exe"
    "ExcludedProcess22"="caservd.exe"

    :35919
Reply
  • 0

    I apologize for not updating this earlier, but we did find which processes need to be excluded using the ExcludedProcess method.  You will need to re-apply these exclusions each time there is a major update to the Sophos product, which is quite a pain in the you know what.  If someone has a way that we will not need to re-apply these after major updates, we would appreciate hearing.

    When we were using Symantec Endpoint Protection we didn' have to do this or several other things that we have to do with Sophos to maintain system performance and protection.  Not sure it was worth the savings in the long run.

    Modify the following registry key to include the following processes:

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SAVOnAccess]

    "ExcludedProcess0"="carunjob.exe"
    "ExcludedProcess1"="UnivAgent.exe"
    "ExcludedProcess2"="caagstart.exe"
    "ExcludedProcess3"="DBENG.exe"
    "ExcludedProcess4"="casdscsvc.exe"
    "ExcludedProcess5"="cadiscovd.exe"
    "ExcludedProcess6"="jobeng.exe"
    "ExcludedProcess7"="casmgmtsvc.exe"
    "ExcludedProcess8"="msgeng.exe"
    "ExcludedProcess9"="Catirpc.exe"
    "ExcludedProcess10"="caserved.exe"
    "ExcludedProcess11"="tapeeng.exe"
    "ExcludedProcess12"="Ofant.exe"
    "ExcludedProcess13"="dbaexchr.exe"
    "ExcludedProcess14"="ntagent.exe"
    "ExcludedProcess15"="ofawin.exe"
    "ExcludedProcess16"="OFANT.sys"
    "ExcludedProcess17"="dbasvr.exe"
    "ExcludedProcess18"="Catirpc.exe"
    "ExcludedProcess19"="tapeeng.exe"
    "ExcludedProcess20"="Caloggerd.exe"
    "ExcludedProcess21"="dirwatcher.exe"
    "ExcludedProcess22"="caservd.exe"

    :35919
Children
No Data