cancel
Showing results for 
Search instead for 
Did you mean: 

MFEVTPS generating high CPU activity

Hi,

anyone here has an idea why MFEVTPS.exe process might be generating high CPU usage? The ENS Version installed on the system is 10.6.1. If no suggetions to the possible cause are availible I will settle for propositions on how to investigate this 😉

"Mfevtps.exe is the process used to validate the digital signature of a file and modules loaded in a process" - what processes are meant here?

2 Replies
Reliable Contributor Daveb3d
Reliable Contributor
Report Inappropriate Content
Message 2 of 3

Re: MFEVTPS generating high CPU activity

It shouldn't...  I'd suggest you get debug logs, amtrace, procmon log and a process dump and open a ticket. 

Highlighted
Reliable Contributor vnaidu
Reliable Contributor
Report Inappropriate Content
Message 3 of 3

Re: MFEVTPS generating high CPU activity

@HugsNotDrugs 

High CPU usage might occur with McAfee processes, such as MFEVTPS.EXE and MFEESP.EXE, on systems that use ENS, where the Treat match as intrusion or the Log matching traffic option is enabled, on Firewall rules that generate a high number of events. Examples of such rules include DENY ALL or ALLOW ALL.

If you enable these logging options in Firewall rules that trigger lots of event activity, it might cause performance issues. So, enable the logging options only on Firewall rules that do not generate a high number of events. If you encounter this scenario, and disable the logging options on a Firewall rule triggering a high number of events, it might take some time to flush out the backlog of events, before you see the CPU usage decrease.

Venu
More McAfee Tools to Help You
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • Visit: Business Service Portal
  • More: Search Knowledge Articles
  • ePolicy Orchestrator Support

    • Download the new ePolicy Orchestrator (ePO) Support Center Extension which simplifies ePO management and provides support resources directly in the console. Learn more about ePO Support Center