cancel
Showing results for 
Search instead for 
Did you mean: 

McAfee Move Performance Issue

Hi,

We have newly created a MOVE environment. But users have reported performance problem. When i uninstall the MOVE from the machine- performance improves a lot. (Its not slow anymore).

We have applied the Basic Settings. Have enclosed the screen shot. Kindly Advise

9 Replies

Re: McAfee Move Performance Issue

Hi Kevin,

let me ask you a few basic things:

1) is the offload appliance on the same network (subnet) as the client machines? that menas it is not possible there could be any firewall, router etc. in between them?

2) what is the number of clients and what are the hardware specifications of the offload server/s?

Next thing to do could be checking the logs:

On the client machine: C:\Program Files\McAfee\MOVE AV Agent\mvagent.log

On the offload appliance: C:\Program Files (x86)\McAfee\MOVE AV Server\mvserver.log

epoquito

Re: McAfee Move Performance Issue

Hi epoquito,

Thanks for replying

This is a log i could find in the server.

   

avs_server.c:  500: Number of entries 100000 in AVS Cache exceeded Max limit 0. Freeing

U.3688.3396

This log keeps on repeating.

Is this could be the issue?

Re: McAfee Move Performance Issue

Is there any exclusions which i should add in exclusion list for Move

As for now i have added only the following exclusion list

C:\Program Files (x86)\McAfee\MOVE AV Server\scanfiles

Re: McAfee Move Performance Issue

Hi, I need the answers to the questions as well, let us don't stick with the logs only

1) is the offload appliance on the same network (subnet) as the client machines? that menas it is not possible there could be any firewall, router etc. in between them?

2) what is the number of clients and what are the hardware specifications of the offload server/s?

Another useful output on the server could be found after running this commands in cmd as administrator in the MOVE program files directory:

mvadm.exe config show

mvadm.exe stats

On the client almost the same:

mvadm.exe config show

mvadm.exe status

Re: McAfee Move Performance Issue

Hi epoquito

Once again..thanks fro replying

1) is the offload appliance on the same network (subnet) as the client machines? that menas it is not possible there could be any firewall, router etc. in between them?

Answer: No. It is in  a different subnet. But there is no firewall or router in between.

2) what is the number of clients and what are the hardware specifications of the offload server/s?

Answer: As for now we are testing the MOVE. There are 20 clients.

System Configuration: Windows 2008 R2 Server Standard , 4GB RAM , 64-Bit Computer

Command Output from the Offload Server:

C:\Program Files (x86)\McAfee\MOVE AV Server>mvadm stats

Total number of cksum req:                1314205

Total number of file transfer req:         903623

Total number of smart file req:              3579

Cksum cache hit:                           410554

Total av scan req:                         903399

Total av scan failure:                          0

Data recv failure:                            250

Resp send failure:                            140

Total comm threads:                            50

Total heart beat threads:                       8

Total idle threads:                            48

Number of requests in queue:                    0

Wait time of oldest thread in queue:            0

Wait time of oldest thread in queue:            0

Number of items in cache:                  100000

Avg request process time:                0.148807 sec

Avg request wait time:                   0.001090 sec

C:\Program Files (x86)\McAfee\MOVE AV Server>mvadm config show

  MaxCacheItems        100000 (0x186a0)

  NumThreads           50 (0x32)

  ScanArchiveFiles     0 (0x0)

  ScanPUPS             0 (0x0)

  ServerPort1          9053 (0x235d)

  ComputeCksum         1 (0x1)

  ConnTimeout          0 (0x0)

  LogFileNum           4 (0x4)

  LogFileSize          2048 (0x800)

  IntegrityEnabled     1 (0x1)

Command Output from the client:

C:\Program Files\McAfee\MOVE AV Agent>mvadm config show

  AllowNetworkScan     0 (0x0)

  CacheFetchInterval   300 (0x12c)

  EventSink            14 (0xe)

  MaxFileSize          100 (0x64)

* RTEMode              1 (0x1)

  ScanAllFileTypes     1 (0x1)

  ScanFlags            7 (0x7)

  ScanTimeout          45000 (0xafc8)

  ServerAddress1       192.X.X.X.

  ServerAddress2       192.X.X.X

  ServerPort1          9053 (0x235d)

  ServerPort2          9053 (0x235d)

  ThreatAction1        0 (0x0)

  ThreatAction2        1 (0x1)

  ConnTimeout          0 (0x0)

  LogFileNum           4 (0x4)

  LogFileSize          2048 (0x800)

  IntegrityEnabled     7 (0x7)

C:\Program Files\McAfee\MOVE AV Agent>mvadm status
Scan Configuration:            Enabled
Driver Status:                 Unknown driver status
Primary Server:                192.X.X.X:9053 [Configured]
Secondary Server:            192.X.X.X:9053 [Configured]

Protection Status:             Disabled
Error 13: MSG-NOT-FOUND

Re: McAfee Move Performance Issue

Please let me know if you need any further information

Re: McAfee Move Performance Issue

Thanks for the information gathering. There are some minor failures in communication, but nothing I would consider serious.

According to the logs and the screenshots I think you have MOVE-AV version 1.6 (or even 1.5). My recommendation is to go for version 2.0, as R2 server and VSE 8.8 is supported with the new version. As you are still testing, it would be a wise move to upgrade.

epoquito

Re: McAfee Move Performance Issue

Hi epoquito,

                    As we didnt have the options of upgrading to MOVE Version 2.0, we downgraded the Version to 1.5 and made the MOVE server run VSE 8.7i. Now the performance is good. I think its because of the product compatibility issue. Im not sure of this

Re: McAfee Move Performance Issue

Hi Kevin,

glad to hear you've found a suitable. Id' recommend contacting McAfee support anyway to verify, what problem there is and to have a possibility to upgrade to recent versions of MOVE.