cancel
Showing results for 
Search instead for 
Did you mean: 

Slow traffic on NSM after upgrade to 8.3

After a recent upgrade of the NSM to 8.3.7.29.1 and the sensors (M-2950) to 8.3.3.9 I am experiencing a drop in throughput, we transfer data files from one part of our system to another to be processed. This transfer is done via FTP, before the upgrade we were transferring 7000 files in 4 minutes, after the upgrade we transfer 7000 files in about 1 hr. sometimes longer, this means that it misses a window for the data to be processed. I cannot see any activity in the logs to say that there are any issues, is it possible to create an ignore rule so that the IP addresses are ignored? please see the drawing below as an guide.

4 Replies
Reliable Contributor Hayton
Reliable Contributor
Report Inappropriate Content
Message 2 of 5

Re: Slow traffic on NSM after upgrade to 8.3

I see other posts about NSM in Network Security Platform so this question probably belongs there.

Moved from Consumer to Business --> Network Security --> Network Security Platform (NSP, NIPS, NAC, NTBA) for attention.

Reliable Contributor petermason
Reliable Contributor
Report Inappropriate Content
Message 3 of 5

Re: Slow traffic on NSM after upgrade to 8.3

Hi Orangecrush,

What version did you upgrade from?

Have a look at the KB link below and see if any of the steps help you identify the issue.

How to troubleshoot Sensor latency issues;

https://kc.mcafee.com/agent/index?page=content&id=KB70861

You can use an ignore rule or a firewall rule the tell the sensor not to scan the traffic from this source, but it is probably better to find out what the issue is, it may be impacting you in other less obvious ways.

Regards

Peter

Highlighted
Reliable Contributor petermason
Reliable Contributor
Report Inappropriate Content
Message 4 of 5

Re: Slow traffic on NSM after upgrade to 8.3

Hi Orangecrush,

I see a similar issue for 8.2.x M Series sensors is listed as resolved in the 8.2.3.145 hot fix software which was released today.

1078541 During inspection, the Sensor causes delays in the processing of passive FTP traffic.

It's worth checking if this issue is known in the 8.3 release and if there is a hotfix available.

Regards

Peter

Re: Slow traffic on NSM after upgrade to 8.3

Hi Peter,

Thanks for the response, I have been informed by my support that I will need to create a firewall rule, I will have a look to see anything is mentioned for the release.

Regards

Dave

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community