locked
Forefront Client Security RRS feed

  • Question

  • Hi All

    I have forefront install at most of our branch sites. I have found that forefront slows down access to applications locally as well as on the network. When I stop the services & try these applications they work normal as soon as i start them there is a delay between 10 & 15sec more then normal.

    Is there any way to speed this up. I have added these applications to the exclusion list, but this does not help. Is there anyhting else I can do to speed this up.

    Monday, August 10, 2009 9:53 AM

Answers

  • Well... It's a tough one.
    I would go with Process exclusions if it's only a few applications that missbehave.

    The problem is that process exclusions "can only" be added using the local UI. (open a FCS client UI and look under tools -> options) and i'm suspecting that it will be too time consuming for you to do this manually on all computers, correct?
    To start off, I would take one client and add the process exclusions using the local FCS UI, just to see if it fixes your problem.

    if it does. I would go with a custom .adm file (GPO template) to deploy these exclusions to your enterprise.

     

    I do have an .adm file, I will do some tests this week (can't promise anything) and if it works fine i'll post it to my blog (and here) www.msforefront.com

    /Johan
    MCSE, forefront spec | www.msforefront.com
    Monday, August 10, 2009 7:51 PM

All replies

  • Hi!

    Adding to the exclusions list should do the trick.
    Can you explain exactly what you have added to the exclusions? did you use folder exclusions, file extensions or process exclusions.

    /Johan
    MCSE, forefront spec | www.msforefront.com
    Monday, August 10, 2009 11:42 AM
  • Hi Johan

    these are the exclusions I have put put

    C:\\Program Files\\tightvnc\\WinVNC.exe"=dword:00000000
    "O:\\"=dword:00000000
    "G:\\"=dword:00000000
    "P:\\"=dword:00000000
    "H:\\"=dword:00000000
    "S:\\"=dword:00000000
    "C:\\Program Files\\realvnc"=dword:00000000
    "C:\\Program Files\\Tightvnc"=dword:00000000
    "C:\\Program Files\\ultravnc"=dword:00000000
    "C:\\Network Shares\\It software\\orl-vnc\\"=dword:00000000
    "O:\\program\\*.exe"=dword:00000000
    "C:\\Program Files\\tightvnc\\VNCHooks.dll"=dword:00000000
    "R:\\"=dword:00000000
    "U:\\"=dword:00000000
    "N:\\"=dword:00000000
    "g:\\apps\\cardio\\*.exe"=dword:00000000
    "C:\\Program Files\\Criffel\\Passport for Vision\\PDM.exe"=dword:00000000
    "C:\\WinVNC"=dword:00000000
    "C:\\Program Files\\ORL\\vnc\\*.exe"=dword:00000000
    "C:\\Program Files\\ORL\\vnc\\"=dword:00000000
    "C:\\medapps\\s6000\\*.exe"=dword:00000000
    "C:\\Program Files\\FrontDesk\\*.EXE"=dword:00000000
    "N:\\PCTI\\DOCMAN7\\Programs\\*.exe"=dword:00000000
    "S:\\PCTI\\DOCMAN7\\Programs\\*.exe"=dword:00000000
    "H:\\PCTI\\DOCMAN7\\Programs\\*.exe"=dword:00000000
    "C:\\Program Files\\lv2\\*.exe"=dword:00000000
    "T:\\"=dword:00000000

    Is this right? How would you add a process exclusions?
    Monday, August 10, 2009 1:40 PM
  • Well... It's a tough one.
    I would go with Process exclusions if it's only a few applications that missbehave.

    The problem is that process exclusions "can only" be added using the local UI. (open a FCS client UI and look under tools -> options) and i'm suspecting that it will be too time consuming for you to do this manually on all computers, correct?
    To start off, I would take one client and add the process exclusions using the local FCS UI, just to see if it fixes your problem.

    if it does. I would go with a custom .adm file (GPO template) to deploy these exclusions to your enterprise.

     

    I do have an .adm file, I will do some tests this week (can't promise anything) and if it works fine i'll post it to my blog (and here) www.msforefront.com

    /Johan
    MCSE, forefront spec | www.msforefront.com
    Monday, August 10, 2009 7:51 PM
  • Thanks Johan

    I will try this as well & let you know. I did find some thing online for network drives scanning. Article ID: 939361.  I will try this aswell.

    Regards

    Umang

    Monday, August 17, 2009 3:28 PM
  • Hi Johan

    I am still having loads of problems regarding slowness. I have added exclusions in the process side of forefront but that did not help.
    I have to find a solution otherwise they are going to change the antivirus. I have also scheduled the pc only to do a quick scan, but on some pc's take 30 to 40min sometime more. Is there anything I can do to speed up how forefront scans when accessing applications & database on the network.
    Wednesday, September 16, 2009 3:13 PM