Loading...

Knowledge Center


System slows or stops responding while accessing files over the network
Technical Articles ID:   KB85156
Last Modified:  3/25/2019
Rated:


Environment

McAfee Application and Change Control (MACC) 8.x, 7.x, 6.2.x, 6.1.x
 

Problem

You might observe system slowness or the system hangs while performing file operations over the network when Application Control or Change Control is enabled.

Solution

IMPORTANT: This solution requires upgrading Application and Change Control to a version listed below. When the upgrade is completed, a configuration change must be made to ensure proper functionality. Make this configuration change through either the Standalone or ePolicy Orchestrator (ePO) Managed methods, also listed below.
  1. Upgrade to one of the following Application and Change Control versions:
    • 6.1.3.419 or later
    • 6.2.0.458 or later
    • 7.0.0.666 or later
    • 8.0.0.651 or later
  2. After upgrading, make the required configuration change:
  • Standalone:
    1. Recover the Solidifier command-line interface (CLI).
    2. Run the command:
If 8.2.1.114 or earlier: sadmin config set SrvThreadBypassConfig=1
If 8.2.143 or later: sadmin config set RemoteFileModificationBypassConfig=1
  • ePO managed:
    1. Create a run command client task with the argument:
If 8.2.1.114 or earlier: "sadmin config set SrvThreadBypassConfig=1
If 8.2.143 or later: sadmin config set RemoteFileModificationBypassConfig=1
  1. ​​​Push the task to one or more clients.
NOTE: SrvThreadBypassConfig=1 resolves a deadlock thread issue with MACC and Windows Oplock (Opportunistic Locks). Enabling this feature configures MACC to bypass thread checks. Bypassing these thread checks prevents this type of deadlock from occurring and does not result in any loss of MACC product functionality.

NOTE: In 8.2.1.114 and later, the SrvTheadBypassConfig has been replaced by the following two configs:
  • RemoteFileModificationBypassConfig - This config has the same function as SrvTheadBypassConfig, but by default it only bypasses non-binaries file modifications/access, avoiding checksum mismatches if a binary is modified remotely.
  • RemoteBinaryModificationBypassConfig - Turning on this config, if the previous one is also enabled, bypasses binaries to modified/accessed remotely.

Rate this document

Beta Translate with

Select a desired language below to translate this page.

Glossary of Technical Terms


 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.