Citrix Xen and ENS 10.7

[arnaudgirard]

Hello,

We migrated to McAfee ENS 10.7 some weeks ago, since this migration, our Citrix team is complaining about performance issues and slowness (application / startup/ ...).

We implemented "best practices from Citrix KBs" (process and files/folders exclusions) and only scan on write.

It seems that this configuration is now the best.. Should we use "let McAfee decide" and trust all citrix certificates ?

Somebody who protect a citrix infrastructure (xendesktop and xenapp) with McAfee ENS 10.7 can give us advice / best config to minimize impact for users ?

Thanks !

[ryadav1]

Hello ,

Kindly use the option "let McAfee decide" and trust all citrix certificates. IF all the recommended standard exclusions are in place, there should be any issue . 

Also with ENS 10.7 , Adaptive threat prevention also gets install , So you may disable that and check if that makes any difference .if so then i would  recommend you to connect to McAfee Technical Support with Procmon data  .

Thank you. 

[arnaudgirard]

Hello,

Thanks for this answer,

With Let McAfee decide, did you also implement all process and folder exclusions from Citrix (ex : https://docs.citrix.com/en-us/tech-zone/build/tech-papers/antivirus-best-practices.html) ?

For the moment we didn't deploy ATP on Citrix infrastructure, they only complains about on-access scan which use too much CPU and seems to introduce slowness.

Also, sometimes mfevtp process use about 15 % CPU, how to check why ?

Thanks !