ATP and MS Patch KB4530717 causes some applications to run slow
I have a problem where we found that some applications runs slow or fails to run as normal after MS Patch KB4530717 was installed to our Windows 10 computers.
Since this occurred during the Christmas holiday, we knew that we didn’t do any changes in the McAfee environment for our customer. We started to look at other changes that was done where we found that Workplace Team deployed MS Patch KB4530717.
We uninstalled this patch and everything was OK again.
To troubleshoot this, since KB4530717 is mandatory, our team was assigned the task to disable all McAfee components. This didn’t result in any better result.
After that we uninstalled the McAfee components on a test computer and found that it resolved the problem.
To pinpoint what module that was not working well with KB4530717, we installed component by component and found out that, as soon as the ATP module was installed, the problems occurred again.
Now, running the test computers without the ATP module everything works fine.
What we noticed so far is the following;
Certain IP telephony software fails to run as normal with delays that eventually times out.
Changing sound device from one to another take a long time with the message "Not responding"
Do anyone else experience the same problems since patch KB4530717.
I also submitted a Service Request where McAfee couldn’t see anything that indicated on ENS being involved in causing any issue.
Re: ATP and MS Patch KB4530717 causes some applications to run slow
The post is quite old but this may help for all customers who use the ATP Module:
* The ATP uses DNS for lookup of unknown files
* If the PC has no internet Access for certain things and you use ATP you may get delay!
* The CLIENTS who are isolated BEHIND a corporate PROXY need to have certain WAN addresses from McAfee open. (Certificate Revocation lists)
* As SOON as you use the ATP Module you have to assure that the clients can get info via DNS (Lookup of files via DNS to McAfee) and also make sure that Certificate, Certificate Revocation on all clients are possible to Internet WAN
If you do not assure that you will have possible Delay, High CPU, Memory Peaks on machines as soon as you install the ATP Module.
For the Certificate Revocation we talk about things like here:
Next thing is to understand precisely which file/process is causing the slowness depending on that if you are aware you can add them to the ATP exclusions, additionally, since you have already raised SR with McAfee Technical Support, I would request you to replicate the issue and run Procmon and AMTrace fro 3 minutes and capture the data once done save it and upload the same on the SR.
The engineer should be able to analyze the data and help you understand if this issue is caused due to the McAfee process or any 3rd party process, depending on that, you can have them added into the ATP exclusions to avoid application slowness.
Was my reply helpful? If you find this post useful, please give it a Kudos! Also, please don't forget to select "Accept as a solution" if this reply resolves your query!
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.
Community Help Hub
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.