High CPU use by mfeatp with "Enable Enhanced Script Scanning" enabled

Technical Articles ID: KB92399
Last Modified: 9/24/2020

Environment

McAfee Endpoint Security (ENS) Adaptive Threat Protection (ATP) 10.7.x

Problem

After you install ENS ATP 10.7.x, you see continuous high CPU use for the mfeatp process.

Cause

The ENS ATP 10.7.x setting Enable Enhanced Script Scanning (includes AMSI) causes this issue.

Solution

The issue is resolved in Real Protect Engine version 1.1.0.6396. The Real Protect content is automatically updated on the endpoints through the AMCore content package.

Workaround

Disable the option Enable Enhanced Script Scanning (includes AMSI) found within the ENS ATP Options policy.

Affected Products

Endpoint Security Adaptive Threat Protection
Endpoint Security Threat Prevention 10.7.x
Known Issue/Product Defect

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Italian
Japanese
Portuguese Brasileiro
Chinese Simplified

Knowledge Center

High CPU use by mfeatp with "Enable Enhanced Script Scanning" enabled

Environment

Problem

Cause

Solution

Workaround

Affected Products

Languages:

Title

Title

Knowledge Center

High CPU use by mfeatp with "Enable Enhanced Script Scanning" enabled

Environment

Problem

Cause

Solution

Workaround

Affected Products

Languages:

Choose your region

Title

Title