9 Replies Latest reply on Mar 2, 2012 2:14 AM by epoquito

    McAfee Move Performance Issue

    kevin_27

      Hi,

       

      We have newly created a MOVE environment. But users have reported performance problem. When i uninstall the MOVE from the machine- performance improves a lot. (Its not slow anymore).

       

      We have applied the Basic Settings. Have enclosed the screen shot. Kindly Advise

        • 1. Re: McAfee Move Performance Issue
          epoquito

          Hi Kevin,

          let me ask you a few basic things:

          1) is the offload appliance on the same network (subnet) as the client machines? that menas it is not possible there could be any firewall, router etc. in between them?

          2) what is the number of clients and what are the hardware specifications of the offload server/s?

           

          Next thing to do could be checking the logs:

          On the client machine: C:\Program Files\McAfee\MOVE AV Agent\mvagent.log

          On the offload appliance: C:\Program Files (x86)\McAfee\MOVE AV Server\mvserver.log

           

          epoquito

          • 2. Re: McAfee Move Performance Issue
            kevin_27

            Hi epoquito,

             

            Thanks for replying

             

            This is a log i could find in the server.

               

            avs_server.c:  500: Number of entries 100000 in AVS Cache exceeded Max limit 0. Freeing

            U.3688.3396

             

            This log keeps on repeating.

             

            Is this could be the issue?

            • 3. Re: McAfee Move Performance Issue
              kevin_27

              Is there any exclusions which i should add in exclusion list for Move

               

              As for now i have added only the following exclusion list

               

              C:\Program Files (x86)\McAfee\MOVE AV Server\scanfiles

              • 4. Re: McAfee Move Performance Issue
                epoquito

                Hi, I need the answers to the questions as well, let us don't stick with the logs only

                 

                1) is the offload appliance on the same network (subnet) as the client machines? that menas it is not possible there could be any firewall, router etc. in between them?

                2) what is the number of clients and what are the hardware specifications of the offload server/s?

                 

                Another useful output on the server could be found after running this commands in cmd as administrator in the MOVE program files directory:

                mvadm.exe config show

                mvadm.exe stats

                 

                On the client almost the same:

                mvadm.exe config show

                mvadm.exe status

                • 5. Re: McAfee Move Performance Issue
                  kevin_27

                  Hi epoquito

                   

                  Once again..thanks fro replying

                   

                  1) is the offload appliance on the same network (subnet) as the client machines? that menas it is not possible there could be any firewall, router etc. in between them?

                   

                  Answer: No. It is in  a different subnet. But there is no firewall or router in between.

                   

                   

                  2) what is the number of clients and what are the hardware specifications of the offload server/s?

                   

                  Answer: As for now we are testing the MOVE. There are 20 clients.

                   

                  System Configuration: Windows 2008 R2 Server Standard , 4GB RAM , 64-Bit Computer

                   

                  Command Output from the Offload Server:

                   

                  C:\Program Files (x86)\McAfee\MOVE AV Server>mvadm stats

                  Total number of cksum req:                1314205

                  Total number of file transfer req:         903623

                  Total number of smart file req:              3579

                  Cksum cache hit:                           410554

                  Total av scan req:                         903399

                  Total av scan failure:                          0

                  Data recv failure:                            250

                  Resp send failure:                            140

                  Total comm threads:                            50

                  Total heart beat threads:                       8

                  Total idle threads:                            48

                  Number of requests in queue:                    0

                  Wait time of oldest thread in queue:            0

                  Wait time of oldest thread in queue:            0

                  Number of items in cache:                  100000

                  Avg request process time:                0.148807 sec

                  Avg request wait time:                   0.001090 sec

                   

                  C:\Program Files (x86)\McAfee\MOVE AV Server>mvadm config show

                    MaxCacheItems        100000 (0x186a0)

                    NumThreads           50 (0x32)

                    ScanArchiveFiles     0 (0x0)

                    ScanPUPS             0 (0x0)

                    ServerPort1          9053 (0x235d)

                    ComputeCksum         1 (0x1)

                    ConnTimeout          0 (0x0)

                    LogFileNum           4 (0x4)

                    LogFileSize          2048 (0x800)

                    IntegrityEnabled     1 (0x1)

                   

                  Command Output from the client:

                   

                  C:\Program Files\McAfee\MOVE AV Agent>mvadm config show

                    AllowNetworkScan     0 (0x0)

                    CacheFetchInterval   300 (0x12c)

                    EventSink            14 (0xe)

                    MaxFileSize          100 (0x64)

                  * RTEMode              1 (0x1)

                    ScanAllFileTypes     1 (0x1)

                    ScanFlags            7 (0x7)

                    ScanTimeout          45000 (0xafc8)

                    ServerAddress1       192.X.X.X.

                    ServerAddress2       192.X.X.X

                    ServerPort1          9053 (0x235d)

                    ServerPort2          9053 (0x235d)

                    ThreatAction1        0 (0x0)

                    ThreatAction2        1 (0x1)

                    ConnTimeout          0 (0x0)

                    LogFileNum           4 (0x4)

                    LogFileSize          2048 (0x800)

                    IntegrityEnabled     7 (0x7)

                   

                   

                  C:\Program Files\McAfee\MOVE AV Agent>mvadm status
                  Scan Configuration:            Enabled
                  Driver Status:                 Unknown driver status
                  Primary Server:                192.X.X.X:9053 [Configured]
                  Secondary Server:            192.X.X.X:9053 [Configured]

                  Protection Status:             Disabled
                  Error 13: MSG-NOT-FOUND

                  • 6. Re: McAfee Move Performance Issue
                    kevin_27

                    Please let me know if you need any further information

                    • 7. Re: McAfee Move Performance Issue
                      epoquito

                      Thanks for the information gathering. There are some minor failures in communication, but nothing I would consider serious.

                      According to the logs and the screenshots I think you have MOVE-AV version 1.6 (or even 1.5). My recommendation is to go for version 2.0, as R2 server and VSE 8.8 is supported with the new version. As you are still testing, it would be a wise move to upgrade.

                       

                      epoquito

                      • 8. Re: McAfee Move Performance Issue
                        kevin_27

                        Hi epoquito,

                         

                                            As we didnt have the options of upgrading to MOVE Version 2.0, we downgraded the Version to 1.5 and made the MOVE server run VSE 8.7i. Now the performance is good. I think its because of the product compatibility issue. Im not sure of this

                        • 9. Re: McAfee Move Performance Issue
                          epoquito

                          Hi Kevin,

                          glad to hear you've found a suitable. Id' recommend contacting McAfee support anyway to verify, what problem there is and to have a possibility to upgrade to recent versions of MOVE.