PoGoStick

I am running Application control 6.1 SP1 in my environment. I have scaled back the file scan policies to temp, program files, and downloaded program files folder. I also changed the delay to 300ms. The problem is that this solution is still causing debilitating slowness for some users at boot time and 10 to 20 minutes after the boot. I am using a reference system to whitelist as well. There are currently ~30,000 files that have been discovered in the system.

Has anyone done anything to overcome the severe slowness caused by this product, or have any tips or little golden nuggets to share. I have read the help and done as much research as possible, but there just isnt very much really detailed information on the inner workings of this product. I can tell it to do a filescan once a day, but i cant tell it when to do it. I can tell it to perform resource discovery once a day but again not when. Which one of these things is causing the slowness?

Oh well, any help would be greatly appreciated.

nande65

Hello,

I am experiencing something similar in my environment. App Control 6.1 (or 6.1 SP1) agent installed on Windows XP PC slows down at bootup .... the exact time to boot up varies but averages between 3 and 15 minutes. I have about 300 dynamic filters (using the blacklisting approach) and the moment I enable them the problem starts.

I have not solved the issue but I have been combing thru the verbose log files and I have noticed that it is the File Inventory agent that puts a great number of entries right from the start. I don't see any great time gaps or any errors that might indicate what the problem is.

Things I have tried include:
- tried 6.1 and 6.1SP1 agents
- tell Antivirus Real time scan to ignore Altiris Agent App Control folders and executables (including the App Control databases on the local PC)
- changed AC service to be one of the last to start
- disabled 'Default File Inventory Policy'
- added a policy at the highest priority to allow LocalSystem apps and Services
- recreated all filters
I looked at GPOs, network, Antivirus, Windows services ... disabling these did not improve the boot up times

Thanks

Alex