Host Intrusion Prevention for Linux experiences high CPU condition with the HIPUS process on systems with multi-core processors
Technical Articles ID:
KB75703
Last Modified: 11/7/2016
Last Modified: 11/7/2016
Host Intrusion Prevention for Linux experiences high CPU condition with the HIPUS process on systems with multi-core processors
Technical Articles ID:
KB75703
Last Modified: 11/7/2016 EnvironmentMcAfee Host Intrusion Prevention (Host IPS) 8.0, 7.1, 7.0 (Linux)
ProblemHigh CPU usage on Linux systems with multi-core processors when Host IPS for Linux is installed.
CauseThe Host IPS for Linux HIPUS program was designed with a single-threaded architecture. This design causes systems with multi-core processors to experience a high CPU condition when using the Host IPS for Linux software.
NOTE: Host IPS for Solaris and Host IPS for Windows are not affected. SolutionThis architecture issue is resolved in Host IPS 8.0 Patch 4.
As a temporary measure, implement the workaround shown below. WorkaroundEngineering has found that most applications running Host IPS 8.0 software on Linux platforms have an acceptable level of performance when installed as a virtual guest using less than four virtual processors hosted on a VMware ESXi hypervisor.
The applications being used by the Linux system determine the actual performance of the system. Using fewer virtual processors allows the Host IPS for Linux single-threaded architecture to have better overall system performance. Affected ProductsGlossary of Technical Terms |
|