McAfee Move 4.0 Agentless Solution Issues

[edawg]

Hello-

We are running Horizon View 5.2 with linked clones using the Wyse P25 endpoint solution.  For antivirus we have the McAfee Move 3.0 agentless solution deployed.  My problem is with the Move solution new log ins are taking around 1 minutes to 1 minute and 40 seconds.  If I shut off the MOVE appliances logs in complete in about 15 seconds.  Obviously a big time difference.  I have tried working with McAfee but they are useless.  Is anyone using MOVE with non persistent desktops and seeing better results?  I am tempted to move to Trend Micros Deep Security solution, but that will require a lot of work politically.

Thank you in advance,

Erik

[bjohn]

We are looking to deploying move, were you able to resolve this issue?

[edawg]

Unfortunately, no.  Ended up going with Trend Deep Security 9.0.6019.  Working pretty well so far.  More integration with VMware.

[Gaurav_Baghla]

I understand you have already moved to trendMicro but I thought this might help someone searching for the same if you are using MCafee with Move then

An issue in the VMware vShield Endpoint Thin Agent driver (vsepflt.sys) causes it to continually purge the local cache. The Endpoint driver is backward compatible and supports earlier versions of the EPSec Library by doing a version negotiation. The MOVE appliance uses an older version of the EPSec library.

On systems with a heavy load, the version negotiation may establish an unsupported version leading to rejection by the EPSec library. The driver then attempts to send the event multiple times and this may lead to a CPU spike on the affected virtual machine.

Check the article for more details http://kb.vmware.com/kb/2077305