Client computers are taking >2min to shutdown with HIP 126.96.36.19919 installed. If HIPs is removed, then client shutdown takes <30sec. Any ideas?
Clients are running agent 188.8.131.520on 4/17/14 7:09:27 AM GMT-05:00
We have the same problem. We had to escalate to McAfee Platinum (since 21.3.2014... so today is 29.4.2014 ).
We are sure that problem is in Patch 4.
For your test you can stop manually service "McAfee Host Intrusion Prevention IPC service" and after that you try ShutDown. It will be quick.
This problem reported all users but users with SSD drives where times enormous increased (SSD drives have VIPusers only)
We have suspicion to HIPS extension.
We are using ePO 184.108.40.2060 (P2) and HIPS 220.127.116.1119 (P4) and ePO 5.0.1
(we would like upgrade to ePO 5.1 long time but still isn´t compatible GTI Proxy. )
we have 450 laptops with HIPS 18.104.22.16819, ePO 22.214.171.1247 and VSE 126.96.36.1995 and don't have slow shutdown issues.
We only use firewall rules and not IPS module.
Did you test with only the HIPS firewall enabled ?
Maybe the problem is with your IPS rules.
We can be more secure, we are using the last version McAfee products.
I hope that new update is published that McAffe tested it well.
Of course we are testing new update in our lab. But sometimes problem aren´t in testing enviroment.
So then we have to use McAfee Platinum Support.
HIPS and IPS and FW rules
We are using hips since version 6.
And IPS policy in HIPS 8 wasn´t long time changed. (So I think that problem isn´t there)
Problem turned out to to P4.
steflevy94 - you are using old VSE and old CMA ... there maybe isn´t problem.
We can´t roll back to old version 12.000 clients.
Patch 4 add some service "McAfee Host Intrusion Prevention IPC" and better communication with CMA.
(We try some test with old ePO Agent 4.6 P3 and there is ShutDown a little faster ...)
I hope that McAfee Platinum give us some solution.
What level of logging do you have for Firewall and IPS under the HIPs General > Client UI? We were finding FireSVC.exe using a large chunk of CPU and slow start up/shut down. Adjustment of this to "Error" eliminated that.
It is still bad... but there is only the one workaround.
I mean disable this options.
After that settings you have to update policy on clients and you will try shutting down PC.
SSD is going to off about 20-40 seconds.
Before disable this options it was about 2min.
Before HIPS P4 (so i mean HIPS with P2) it take about 6s ! (the same time like without McAfee products).
So our users know and they are sure what slow down their computers (Intel Mcafee)
So there is some progress but we are not satisfied.
Support haven't any fix (HFX or Patch or new product) :-(
(information from today 24.6.2014... we reported this problem on PlatinumSupport on 21.03.2014)
Does anyone have a better solution ?