We recently upgraded to Host Data Loss Prevention 9 Patch 1 (Agent: 184.108.40.2062).
I am experiencing a lock up issue on Windows 7 64-bit computers only. The issue is happening on all of my Windows 7 64 computers.
Windows XP 32-bit works fine. I do not have any Vista or XP 64 users.
On Windows 7 when browsing network shares or copying files from network locations and also browing the internet the application, either Windows Explorer or Internet Explorer freezes for about 5 seconds, then starts working. The file copies from network shares take an unreasonable amount of time. For example a 1MB file can take 3 minutes to copy, where my XP clients can copy in a few seconds.
When this freeze up is happening no processes are spiking. After the freeze up delay fcag.exe shows some activity like normal and then the computer starts working again. It seems like there is a delayed response by fcag.exe to start processing.
The computers are also running VSE 8.7 patch 4 and are managed through ePO 4.5 Patch 3. Other than that they are pretty standard and are all up to date on windows patches. I have tried rebooting / reinstalling DLP, new user profiles. I do not think it is a DLP policy issue as the Windows XP computers work fine.
Has anyone else had success deploying DLP 9 Patch 1 to Windows 7 64 bit computers?
Has anyone seen this issue that can share some troubleshooting steps I can take?
This has nothing to do with EERM, DLP or McAfee. It's an issue in Win 7, specifically with SMB 2 and queries to the NTFS extended attributes.
I've seen this problem with no third-party software installed. If you copy files to a 2003 server you won't see the problem, only when copying between Win 7 and 2008 server.
You should open a ticket with Microsoft as well.
We've been using Windows 7 and 2008 server without any issues.
Once McAfee DLP is installed on the Win 7 x64 machine the performance issues start to happen immediately including browsing the internet, not just file shares. Once the DLP software is removed from Win7 x64 performance is restored to normal.
Have you successfully deployed DLP 9 on Windows 7 x64?
I have deployed it to Win 7. We don't have any production 2008 servers. All of our servers are 2003.
DLP stores tags in the NTFS extended attributes. Any software that accesses/queries the extended attributes will expose this issue in Win 7/2008.
Download the new ePolicy Orchestrator (ePO) Support Center Extension which simplifies ePO management and provides support resources directly in the console. Learn more about ePO Support Center