cancel
Showing results for 
Search instead for 
Did you mean: 
JoeyMc
Level 10
Report Inappropriate Content
Message 1 of 4

DLP 9 Patch 1 - Windows 7 64-bit lock-up issue

We recently upgraded to Host Data Loss Prevention 9 Patch 1 (Agent: 9.1.0.522).

I am experiencing a lock up issue on Windows 7 64-bit computers only. The issue is happening on all of my Windows 7 64 computers.

Windows XP 32-bit works fine. I do not have any Vista or XP 64 users.

On Windows 7 when browsing network shares or copying files from network locations and also browing the internet the application, either Windows Explorer or Internet Explorer freezes for about 5 seconds, then starts working. The file copies from network shares take an unreasonable amount of time. For example a 1MB file can take 3 minutes to copy, where my XP clients can copy in a few seconds.

When this freeze up is happening no processes are spiking. After the freeze up delay fcag.exe shows some activity like normal and then the computer starts working again. It seems like there is a delayed response by fcag.exe to start processing.

The computers are also running VSE 8.7 patch 4 and are managed through ePO 4.5 Patch 3. Other than that they are pretty standard and are all up to date on windows patches. I have tried rebooting / reinstalling DLP, new user profiles. I do not think it is a DLP policy issue as the Windows XP computers work fine.

Has anyone else had success deploying DLP 9 Patch 1 to Windows 7 64 bit computers?

Has anyone seen this issue that can share some troubleshooting steps I can take?

Thank you,

Joey

3 Replies

Re: DLP 9 Patch 1 - Windows 7 64-bit lock-up issue

This has nothing to do with EERM, DLP or McAfee.  It's an issue in Win 7, specifically with SMB 2 and queries to the NTFS extended attributes.

I've seen this problem with no third-party software installed.  If you copy files to a 2003 server you won't see the problem, only when copying between Win 7 and 2008 server.

You should open a ticket with Microsoft as well. 

JoeyMc
Level 10
Report Inappropriate Content
Message 3 of 4

Re: DLP 9 Patch 1 - Windows 7 64-bit lock-up issue

Joe,

We've been using Windows 7 and 2008 server without any issues.

Once McAfee DLP is installed on the Win 7 x64 machine the performance issues start to happen immediately including browsing the internet, not just file shares. Once the DLP software is removed from Win7 x64 performance is restored to normal.

Have you successfully deployed DLP 9 on Windows 7 x64?

Thanks

Joey

Highlighted

Re: DLP 9 Patch 1 - Windows 7 64-bit lock-up issue

I have deployed it to Win  7.  We don't have any production 2008 servers.  All of our servers are 2003.

DLP stores tags in the NTFS extended attributes.  Any software that accesses/queries the extended attributes will expose this issue in Win 7/2008.

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community