1 2 Previous Next 10 Replies Latest reply: Feb 23, 2015 9:29 AM by epository RSS

    DLP 9.3 Slowness

    lawler_09

      Hi,

       

      We upgraded to 9.3 and i'm liking some of the changes it's brought like moving bypass code generation from the policy editor etc.

       

      The one thing i do NOT like is moving the DLP Monitor into ePO itself.

       

      I'm finding that the replacement to the dlp monitor, dlp incident manager is incredibly slow.

       

      Is anyone else finding this?

       

      It takes a good minute for the intial list to load, then if i click into something, and come back out again, it has to load it all again which then takes another minute.

       

      I'd rather not go back to 9.2 but the slowness is making 9.3 unuseable for us.

        • 1. Re: DLP 9.3 Slowness
          iaries

          Hi,

           

          Yes we have faced with the same problem. We use ePO 4.6.6 and DLPE 9.3 (after upgrading from 9.2.2). But we have approximately 7 000 000 events on 410 000 pages. Because of this we have to wait half an hour while this dashboard loading.

          • 2. Re: DLP 9.3 Slowness
            vimalnavis

            This is a known issue at this time. Expect a repost of 9.3 sometime this week.

            • 3. Re: DLP 9.3 Slowness

              Before the 9.3 refresh is released, you can contact support and reference KB78662 for a workaround to be performed.

              • 4. Re: DLP 9.3 Slowness
                warlock003

                I had an issue with the 9.3 server being very slow to open.

                1. Make sure you database is not to large.

                2. Setup a purge for say 90 or 180 days.

                3. Uninstall DLP Management tools (make sure all browsers are closed) add-rem programs remove - reboot login to console and select dlp monitor and or incident manager and the new version will come down also make sure your client is 9.3

                • 5. Re: DLP 9.3 Slowness
                  ta11

                  Now we have January 2014, upgraded DLP extention from 9.2 to 9.3.1 and still have performance issue.

                  We have db with about 4 000 000 DLP events.

                  Upgrade proccess was very painful, we did 2 times rollback. Finally succeeded.

                  But ...

                  ... global admin opens Incident Manager with about 20 sec every time you need to go to the page.

                  DLP events reviewer gets error after 45 secs.

                  Posted it here.

                  Also waiting response from support.

                   

                  rgds

                  Taavi

                  • 6. Re: DLP 9.3 Slowness
                    keithdrone

                    First off, try clearing out some events you don't need or know are not relevant.   The 'Incident Purge' works good for this.

                     

                    DLP logs a lot of extra data you likely don't need, such as 'policy applied' etc.

                    • 7. Re: DLP 9.3 Slowness
                      ta11

                      Thnx for tip keithdrone. Yes, there are some type of events that could be purged.

                      When analysing events in db I discovered that there is massive amount of events from old times when we used DLP 3.0.

                      Could be I havent discovered those  before because those do not show up with ePO thread and client events, but only with DLP events (under "other" queries).

                      Seems that after DLP upgrade from ver 3 to ver 9, this is changed. All the ePO purge tasks stopped to see those ...

                       

                      And now it seems to me that this is not possible to remove those 3.0 events with simple way ... , at least admininstrative events ...

                       

                      rgds

                      Taavi

                      • 8. Re: DLP 9.3 Slowness
                        keithdrone

                        You can create the Incident Purge tasks via the incident manager (and use the EPO server tasks to schedule them),   For 'Operational Events'  use the 'Database Administration' via the DLP Policy page (bottom left, I think).  

                         

                         

                        If you still can't delete them, but can access them via the incident manager, try assigning labels then creating tasks to delete them based on that.  Otherwise check with support, we had a similar issue when we went from 9.1 to 9.2 then 9.2.2 now 9.3......    discovered all sorts of items we thought were 'gone'.   Took me a while to get them purged, some had to be done by treating them as 'Operational Events'.

                        • 9. Re: DLP 9.3 Slowness
                          vimalnavis

                          Work with McAfee Support. They will be able to help you get rid of all unnecessary events and / or incidents.

                          1 2 Previous Next