Sysmon performance issue on multi user systems (Citrix) RRS feed

  • Question

  • Hey guys,

    We try to run Sysmon 11.11 (tested with various versions) on multi user systems (Citrix)(Windows Server 2019, Build 1809). With our config, which we are running faultless on many servers, Sysmon generates a massive load, which affects user logins und user interactions. For example, a login without Sysmon takes 1:30 from starting the session until everything is up and running. With Sysmon it takes 30 seconds longer. 

    Did somebody make similar experience with Sysmon on a Citrix system?

    Monday, August 10, 2020 2:40 PM

All replies

  • I'm not in a position to help you, but for the sake of discussion and correlation because this concerns our use, what are you using for a config?  Is it Swift on Security's, or home rolled?

    Tuesday, August 18, 2020 6:56 PM