cancel
Showing results for 
Search instead for 
Did you mean: 
Zebu
Level 8
Report Inappropriate Content
Message 1 of 3

ATP McAfee GTI connection

Jump to solution

Hello,

Currently we are using ATP without TIE Server infrastructure. We would like to know how much network load generated on client when using "McAfee GTI Connectivity Only"

Thank you in advance!

Zebu

1 Solution

Accepted Solutions
McAfee Employee AdithyanT
McAfee Employee
Report Inappropriate Content
Message 2 of 3

Re: ATP McAfee GTI connection

Jump to solution

Hi @Zebu 

Thank you for your post. GTI queries from any component will essentially be a DNS query with obfuscated content being sent to our GTI Servers and hence should not weigh much (Less than a KB).

Based on the frequency with which the query happens (depending on the number of unknown files we see each day on your machine), this should be a manageable even for thousands of nodes in your network.

Although we do not have a specific number here is an explanation from KB53735:

GTI File Reputation takes up minimal bandwidth because it triggers only if the existing DAT files do not detect a threat in the program, PDF, or .APK being scanned. Determination of suspicious files is carefully tuned so that only truly suspicious files generate network traffic. If the sensitivity setting is set to Very Low or Low, you can expect an average of 10–15 queries per day, per computer. If the setting is set to Medium, High, or Very High, you can expect an average of 20–25 queries per day, per computer. The number of queries depend on the scan type (On-Access Scan or On-Demand Scan) and how many files are being scanned.

In ATP component as well, GTI queries use similar concept and endpoints do not upload a complete file as such.

I sincerely hope this helps in answering your query.

Was my reply helpful?
If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

Thanks and regards,
Adithyan T
2 Replies
McAfee Employee AdithyanT
McAfee Employee
Report Inappropriate Content
Message 2 of 3

Re: ATP McAfee GTI connection

Jump to solution

Hi @Zebu 

Thank you for your post. GTI queries from any component will essentially be a DNS query with obfuscated content being sent to our GTI Servers and hence should not weigh much (Less than a KB).

Based on the frequency with which the query happens (depending on the number of unknown files we see each day on your machine), this should be a manageable even for thousands of nodes in your network.

Although we do not have a specific number here is an explanation from KB53735:

GTI File Reputation takes up minimal bandwidth because it triggers only if the existing DAT files do not detect a threat in the program, PDF, or .APK being scanned. Determination of suspicious files is carefully tuned so that only truly suspicious files generate network traffic. If the sensitivity setting is set to Very Low or Low, you can expect an average of 10–15 queries per day, per computer. If the setting is set to Medium, High, or Very High, you can expect an average of 20–25 queries per day, per computer. The number of queries depend on the scan type (On-Access Scan or On-Demand Scan) and how many files are being scanned.

In ATP component as well, GTI queries use similar concept and endpoints do not upload a complete file as such.

I sincerely hope this helps in answering your query.

Was my reply helpful?
If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

Thanks and regards,
Adithyan T
McAfee Employee AdithyanT
McAfee Employee
Report Inappropriate Content
Message 3 of 3

Re: ATP McAfee GTI connection

Jump to solution

Hi @Zebu 

Thank you for marking the solution! Kudos to you for letting others know what solved your query!

Have a nice day!

Was my reply helpful?
If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

Thanks and regards,
Adithyan T
More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community