Endpoint Protection

WOW, this news release is sure slow as far as the consoles.
The JAVA console is much slower than it was with RU5, and I've tried using the web based console, whew, watch the processor gauge run to to 60% and STAY there, slowing the computer to a crawl until IE is closed.
It really hits when I open the console to the default or home screen, then choose "preferences" link.
I get a pop-up box, and it sits, just sits, pegging the processor.
I've tried it over and over, same result.
Vista, IE7.
ALL I have done is upgraded the SEPM servers to SEPM RU6, no other changes, have not even tried RU6 of SEP itself - a bit nervous since the management pieces have really slowed down so much. I'm having a lot of trouble switching "tabs" or screens in the java console, sort of like the old days before the stored procedure, and now this web based console.
Anyone else see RU6 slow them down? Especially the management peices - the console much slower, the web based csonole really slow and killing IE?

I've noticed the web console is slow but it hasn't been anything I can't deal with. The java console seems ok as well but I am on IE8 so that could be the difference.

I've had the web console stop working at times for no apparent reason. This was on a test server (running on production level hardware) where I was the only one using it. The fix was to close IE8 and then relaunch the browser and relog in to the web console again.

Since RU6 I no longer use the Java console. The web console that uses Ajax on the back end (and consumes server resources instead of client resources) is much better; In my opinion.

http://server:9090

Please note my original comments - it's IE that it's killing, I'm trying to run it in IE, then when I click the "preferences" link, it chokes.

I'm opening it in IE, not JAVA.

HOWEVER, I must use JAVA as the web client keeps logging me out. IT's the most frusrating thing...........

I log in using IE, get the console up to monitor things, then a few minutes later, it's logged me out. So I have to use the JAVA console until the web-based console is fixed so it doens't keep dropping sessions and logging me out. For now, the web console is pretty useless here. (and it's nearly as slow as the JAVA console..click a different tab, watch the processor use climb, then in a few seconds, it changes tabs)

So my complaint is about the web console, but while we're at it - why did they slow the JAVA console so badly with RU6?

I just did some testing with that Preferences link you mention and it actually caused Chrome to crash. This makes me doubt that it is an IE problem.

Additionally, since I had the actual console open at the same time I went to the home page there to see if the same thing happened and it let me know that the "Query Failed".

This leads me to believe that there may be an issue with the query that the Preferences page runs. I will investigate further.

I was just finally able to open the Preferences and there are now 3 tabs with many new options, It may very well be that the SQL query isn't optimized well, I'll do some more checking.

LOL - I'm only doing 15 things this AM, and there's a huge crunch to get the SQL server C drive cleaned up, so talk about multi-multi-tasking here!
LOL - so my messages may be more short and abrupt than normal. It's stress........... that's all...    ;-)

So, I'm NOT crazy! It really IS slow and causing issues! THank you thank you!!!

ok for me in IE8, what are your SEPM service memory configuration options set to in the registry (Xmx and Xms)?

On the client I run the console from, or on the SEPM server itself?
(I don't run the console from the SEM server, it's run from client computers - that way we don't log in to servers, they sit and serve)

I've not tried this particular link from the SEPM server itself.......... but I DO know it was a DOG on the server just to run the console, web and JAVA

I'll look for those settings - I'll assume they are over on the server and not the client running the console?

yes, I'm running IE8 on a remote PC, connecting to my SEPM.

All the processing for the web console is done on the SEPM, rather than on the client machine.  The CPU usage from IE is just what its using to draw things out.

On the SEPM, check the registry keys:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\semsrv\Parameters\JVM Option Number 0
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\semsrv\Parameters\JVM Option Number 1

Update for the Preferences loading:

Firefox works flawlessly on at least 3 different systems tested.
Chrome works on zero of 4 systems tested.
IE8 works on 3 systems tested.
Safari does not work (only 1 system tested).

I checked the system requirements for the "Symantec Endpoint Protection Manager Web Console" and it states only IE7 or greater is supported, and only then with "Enhanced Security Configuration disabled"

So I visited my web console with IE7 and "Enhanced Security Configuration" enabled; It didn't work (The Preferences link)

Then I turned off "Enhanced Security Configuration" and reopened IE7 and revisited the Preferences link; It is still broken. (and crashes my browser)

Addendum:

I found that if I let the Home page open completely and finish generating its graphs, etc then I can use the Preferences link, (with Enhanced Security Configuration disabled.)

yes, I see the same in IE7, if I wait for the graphs to load, it works, if I click it as soon as I can, it hangs.

ShadowsPapa, can you confirm?

Yes that's that case as of right now......., but earlier today, it was sitting for several minutes before I clicked that link. I'd opened it, gone to other tabs, returned to the home tab, it sat there a while, and I read a forum page, then went to it, and it misbehaved. I actually opened and closed that link several times. So it must be that it never did finish loading the home page for some readon.

Even now, it takes at least a minute, you think it's done, and try, and it hangs, so you try again....... it's hard to know when it's done.
Apparently this AM earlier, it was never finishing.

But as of now this minute, it's better if you wait about a minute before clicking that link - doing so before it wants you to pins the processor pretty good and you must close that popup and try again.

I hate this web interface, sorry! This thing keeps closing the session on me, and I have to keep logging in and then navigating back to the pages where I was, and that takes a lot of time.
For now, I'll have to live with the JAVA console until the web console stops ending sessions. What a pain, and what a shame.

Is there ANY way to tell it to NOT keep kicking me out? When I have things all set the way I need to monitor things, it loses all that and I have to start over. It only stays up for about 10 or 15 minutes.

Xms512m

and

Xmx1024m

 

Where do you see this?
>>with Enhanced Security Configuration disabled<<

Obviously it's not enabled for me on this IE7, however, I can't seem to find that setting...............
(what a bad day!)

@ ShadowPapa, IE ESC is in Add/Remove Windows Component.

I checked both workstations - windows 7 and Vista - I don't see it.
So...........Must be a server thing - we dont' run consoles, etc. from the servers - so would it still apply? OR, is it only a local impact - local to the servers?
In other words, if we don't run IE from the server, and don't run consoles from the server, will it matter, or impact the console running from my workstations?

BTW I ended up needing to force quit Safari.

LOL - ok, let's add another issue to the mix!
I was in the MONITORS tab, after the main (SUMMARY) monitors page fully loaded, I clicked the LOGS tab, and setup to watch the application control log.
It sat on the application control log screen for a while, but then when it refreshed, it kicked me back to the SUMMARY page!
Oh, I need to go home...............................
I"m TRYING to monitor the application control log as folks are attempting installs that we think SEP is stopping. I need to see what's happening, and perhaps add exclusions. But the WEB based console won't let me keep that log open for more than a few minutes.
It either kicks back to the summary page, or "times out" and "ends session"

It just did it again! Instead of refreshing the LOGS like the JAVA app does, the web based takes me back to the summary every time! YIKES!

So, this web interface is basically unusable for us here.

oops - waited 15 minutes, session timed out again, after twice dropping me out of the log and back to the summary page..

Did anyone try Firefox to see whether it is the same issue?

I couldn't get it to work in Firefox. It was continuously stuck in a "refresh" loop

Shadow, what if you remove IE Enhanced Security Configuration from the server that the SEPM is hosted on?

Wow new release of SEP causing the problem in the SEP MR6 client ?

how about if the client still on MR5 and only the mgmt. server is running the MR6 ? would this problem still exist ?

No, the web console is not available in RU5 for SEPM. Clients are not affected. This is only for viewing SEPM.

>>Shadow, what if you remove IE Enhanced Security Configuration from the server that the SEPM is hosted on?<<

I checked the SEPM servers, it's NOT even installed - it's unchecked on both. I guess I can't see how a server setting for IE could impact using the console anyway - since the console is not run from servers............ SEPM server is acting only as a web server.

It makes me wonder, though - are we the only ones who believe servers are for serving, and applications and consoles should not be run from servers? Two reasons one should not - you are running applications that take and corrupt memory and can crash - on a SERVER, plus, you have to login to the server itself - adding risks since there is now a person operating on the server console with system or admin rights.

Anyway, after finding that setting is nothing to do with the computers running the console, I did check the servers, and it's not turned on anywhere, so no, I can say that setting is not impacting us at all.
I"ve not tried any other browser as frankly, Symantec states it's only supported in IE7 or later, it's not supported in other browsers.

This is only a console issue.
The clients are running RU5
The SERVER is even running RU5
ONLY the SEPM is updated to RU6 at this point.
I'm not about to install RU6 on any clients until some things are sorted out first............ and I get past this issue with the console, etc.
No need to get 10 cases going at one time, let's get one thing going at a time.  If you do too many upgrades at once and things break, then you have no idea what of the 10 changes you just made broke things.
So in this case:
SEPM upped to RU6.
SEP on the server and SEP on the clients is still RU5.
The version of SEP running on anything should have no impact at all on the console or console functionality.

interesting, I've just tried from IE7 and IE8 on remote PC's and I dont the refresh issue.

The timeout we know about, I'm trying to see if there is a way we can change it.

It doesn't do it every time. I tried to let it run for a couple of hours yesterday. When it didn't time out on me, the refresh worked 2 out of 3 times, then it would revert back to the summary screen instead of staying on the log screen.

I'll try it on another computer with IE8 instead.

I just tried it on another computer. It's even more annoying than I originally thought.
I tried it on Win7, IE8
I went to the Monitors tab, then to the Logs tab in that. I setup to view the application control logs. It shows me the screen. I then click the browser toolbars as with the console in the browser, you can't see as much info as you can in the JAVA screen.
So ALL I DID was tell IE8 to not display the status bar at the bottom of the brower, the console then does a complete refresh and drops me back to the summary screen!
So I again to back into the application control log to watch the log, and any time I do anything at all in the brower, it does a complete refresh of the console screen and drops me back to the summary screen.
This baby is so irritating! Wow, sorry, but it's so painful to use it's making me laugh.
Either during a log refresh (set ot refresh every 3 minutes) or when I do anything with the browser, say grab a corner and stretch the browser out a bit more, it refreshes the whole console screen! It has to draw it from scratch, and it often reverts back to the summary screen then.
Not always, but often, and this is on two different computers, two versions of IE - IE7 on vista and IE8 on Windows 7.

are you letting it fresh automatically (30 seconds, etc.) or hitting F5?

LOL - just for kicks tried again. I grabbed the left edge of the browser, stretched it to the left a couple pixels, the console screen did a total redraw like it always does, and dropped me back to the summary screen! How annoying.........

I never hit F5 or manually refresh.
The console redraws the screen from scratch if you move, stretch the browse, or change any toolbars, and I've got it set for automatic refresh every 3 minutes.

Run IE in a window (I never have ever run any windows app full screen, I'm very claustrophobic and can't stand any app covering the entire screen so since Windows 286 I've never run any app full screen) and when in a window, just move one side out or in a bit................. it'll redraw the whole screen instead of just stretching the current screen, and in 4 of 4 times here this AM, it kicked me back to the summary view when I simply moved or resized the browser. And it's done it a couple times on the automatic refresh.