cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
DavHio
Level 10
Report Inappropriate Content
Message 1 of 3

ATP and MS Patch KB4530717 causes some applications to run slow

Hello,

I have a problem where we found that some applications runs slow or fails to run as normal after MS Patch KB4530717 was installed to our Windows 10 computers.

Since this occurred during the Christmas holiday, we knew that we didn’t do any changes in the McAfee environment for our customer. We started to look at other changes that was done where we found that Workplace Team deployed MS Patch KB4530717.

We uninstalled this patch and everything was OK again.

To troubleshoot this, since KB4530717 is mandatory, our team was assigned the task to disable all McAfee components. This didn’t result in any better result.

After that we uninstalled the McAfee components on a test computer and found that it resolved the problem. 

To pinpoint what module that was not working well with KB4530717, we installed component by component and found out that, as soon as the ATP module was installed, the problems occurred again.

Now, running the test computers without the ATP module everything works fine.

What we noticed so far is the following;

  1. Certain IP telephony software fails to run as normal with delays that eventually times out.
  2. Changing sound device from one to another take a long time with the message "Not responding"

Do anyone else experience the same problems since patch KB4530717.

I also submitted a Service Request where McAfee couldn’t see anything that indicated on ENS being involved in causing any issue.

McAfee Agent

5.6.0.878

McAfee Platform

10.6.1.1724

McAfee Threat Prevention

10.6.1.1777

McAfee Firewall

10.6.1.1394

McAfee Adaptive Threat Protection

10.6.1.1473

McAfee Device Control

11.3.2.82

2 Replies
bretzeli
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 2 of 3

Re: ATP and MS Patch KB4530717 causes some applications to run slow

Hello,

 

The post is quite old but this may help for all customers who use the ATP Module:

* The ATP uses DNS for lookup of unknown files

* If the PC has no internet Access for certain things and you use ATP you may get delay!

* The CLIENTS who are isolated BEHIND a corporate PROXY need to have certain WAN addresses from McAfee open. (Certificate Revocation lists)

* As SOON as you use the ATP Module you have to assure that the clients can get info via DNS (Lookup of files via DNS to McAfee) and also make sure that Certificate, Certificate Revocation on all clients are possible to Internet WAN

If you do not assure that you will have possible Delay, High CPU, Memory Peaks on machines as soon as you install the ATP Module.

For  the Certificate Revocation we talk about things like here:

Butsch.ch | Missing entry in Fortigate Application Filter ROOT.CERTIFICATE.URL and OCSP source of W1...

 

 

ZeeArhaan
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 3 of 3

Re: ATP and MS Patch KB4530717 causes some applications to run slow

Hello,

Thank you for your post, the other best practice to have the ATP module work smoothly is to understand the Dynamic Application Containment rules, kindly refer to the KB below.

https://kc.mcafee.com/corporate/index?page=content&id=KB87843

Next thing is to understand precisely which file/process is causing the slowness depending on that if you are aware you can add them to the ATP exclusions, additionally, since you have already raised SR with McAfee Technical Support, I would request you to replicate the issue and run Procmon and AMTrace fro 3 minutes and capture the data once done save it and upload the same on the SR.

The engineer should be able to analyze the data and help you understand if this issue is caused due to the McAfee process or any 3rd party process, depending on that, you can have them added into the ATP exclusions to avoid application slowness.

Thanks

Was my reply helpful?
If you find this post useful, please give it a Kudos! Also, please don't forget to select "Accept as a solution" if this reply resolves your query!
You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community