6 Replies Latest reply on Sep 4, 2019 3:00 AM by BenWilliamsIOM

    Slow login/Performance App volumes with Symantec client installed

    Hmunning Lurker

      We`ve been troubleshooting slow login and poor application performance on our Non Persistent VDI for a while now. App Volumes and Symantec Endpoint Protection doesn`t seem to like each other.

       

      Without a SEP cliënt installed everything is performing well and user experience feels like a persistent VDI. When SEP is installed including all obvious exceptions and even using the virtual image exception tool no significant change in performance is noticed. We`ve been testing all scenario`s disabling components of symantec. Only disabling "Application & Device Control" seems to improve login and application performance.

       

      Login times :

       

      Symantec all components on + 3 Appstacks                        2,36 Min

      Symantec Application & Device Control off + 3 AppStacks  2,06 Min

       

      Symantec all components on + 1 Appstack                          1,51 Min

      Symantec Application & Device Control off + 1 Appstack    1,25 Min

       

      No Symantec cliënt installed + 3 Appstacks                         0,50 Min

       

      Anyone dealing the same issues? We can`t skip Symantec or move to another AV vendor. (large enterprise)

       

      Horizon View 7.8

      App Volumes 2.16 (computer assigned)

      UEM 9.6

      SEP RU1 14.2.3335.1000

        • 1. Re: Slow login/Performance App volumes with Symantec client installed
          Hmunning Lurker

          Forgot another question : I can`t capture boot logging because the c:\ drive is refreshed after a reboot. (sort of readonly when a appstack is attached?)  Tools i`ve been trying store files during capture on c drive . Can`t change this. 

           

          Anyone knows how i can do this?

           

          - Process Monitor (procmon)

          - Microsoft Windows Performance Toolkit- Xperf

          - WPR (Windows performance recorder)

          • 2. Re: Slow login/Performance App volumes with Symantec client installed
            Ray_handels Master
            vExpertCommunity Warriors

            We use an agent-less scanner (McAfee Move) but I do understand that you cannot go that route.

            How many CPU's do you have? What happens if you try to add some more CPU's? You will need at least 2 vCPU's, otherwise Appvolumes and Symantec are both fighting for resources during logon.

             

            And what exclusions do you have? Did you try adding the c:\snapvolumestemp\Mountpoints as an exclusion??

            • 3. Re: Slow login/Performance App volumes with Symantec client installed
              Hmunning Lurker

              We use 2 vCPU`s and 4 GB memory. We`ve tested with 4vCPU`s and 8GB memory. No change in login performance.  

               

              We have the following exclusions :

               

              mdf,ndf,ldf

              log,jrs,chk,edb,sdb,SHAREDTA

              c:\ws\

              c:\thinapps\

              C:\pagefile.sys

              %[USER_PROFILE]%\appdata\roaming\thinstall\

              %[PROGRAM_FILES]%VMware\

              %[PROGRAM_FILES]%CloudVolumes\

              %[COMMON_APPDATA]%VMware UEM\FlexSync\

              %[PROGRAM_FILES]%Immidio\Flex Profiles\FlexEngine.exe

              %[PROGRAM_FILES]%Immidio\Flex Profiles\FlexService.exe

              C:\PROGRAM FILES (X86)\BIGFIX ENTERPRISE\BES CLIENT\BESCLIENT.EXE

              C:\PROGRAM FILES\VMWARE\VMWARE VIEW\AGENT\BIN\V4PA_AGENT.EXE

              C:\PROGRAM FILES\IMMIDIO\FLEX PROFILES\FLEXSERVICE.EXE

              C:\SnapVolumesTemp\

              C:\SVROOT\

              %[WINDOWS]%SoftwareDistribution\DataStore\

              %[COMMON_APPDATA]%NTUser.pol

              %[COMMON_APPDATA]%VMware\VDM\Logs\

              %[PROGRAM_FILES]%CloudVolumes\Agent\svservice.exe

              %[PROGRAM_FILES]%Immidio\Flex Profiles\Flex+ Self-Support.exe

              • 4. Re: Slow login/Performance App volumes with Symantec client installed
                Ray_handels Master
                vExpertCommunity Warriors

                That should be enough looking at the exclusions. I would suggest using more then 4GB for a VDI machines but that has got nothing to do with virusscanning and slow logon times, just a best practice.

                To be honest I don't now how to fix this. Would it be an option to try and run Windows Defender just as a reference?? It might be the way Symantec works maybe? You will always receive a logon penalty from virus scanners but it should not be this much.

                • 5. Re: Slow login/Performance App volumes with Symantec client installed
                  Anobix67 Enthusiast

                  What happens if you try user-assigned instead of computer-assigned?

                   

                  We also have SEP 14.2.3335.1000 running in our environment with the same exlusions set on our SEPM servers and login times are a minute or less with a couple appstacks applied.

                   

                  VMs are currently 2CPU/6GB RAM and we have machines on both Windows 10 1709 and 1809 LTSC.

                   

                  Horizon 7.8

                  AppVol 2.17

                  UEM 9.8

                  • 6. Re: Slow login/Performance App volumes with Symantec client installed
                    BenWilliamsIOM Lurker

                    We are seeing the same issue here. Removing SEP altogether has shown a x5 increase in almost anything we use. Logon, AppVolumes attachment, AppV launch and cache, general usability are all dramatically improved.

                     

                    Are there any additional settings over Application and Device control that can be set to improve performance?