01-29-2015 08:26 AM
I'm new to Aruba and this community, so please excuse me if I sound naive or if I'm posting this at the wrong place :)
We are using Aruba ClearPass NAC for our wired PCs for a few months now. We were running ClearPass OnGuard agent v6.3.1 on the systems for running posture checks. Our system build typically includes Symantec Endpoint Protection v12.1, Symantec DLP agent v11.x, Microsoft SCCM agent, Imprivata SSO Agent, Outlook, other Office applications, Microsoft Lync and few business applications.
We recently updated ClearPass to v6.4.1 and Symantec DLP to v12.5, and we are facing serious performance issues ever since. End user experience is severely impacted, and the applications hang frequently. Since both the agent updates were rolled out around the same time (big mistake), we are not sure which one is actually causing these issues. We have tried to narrow this down by analyzing a sample set of systems, and we are seeing confusing results so far. While we observe these issues across a lot of the systems, there are systems working perfectly fine with previous DLP versions and new OnGuard versions, and vice versa. We are getting mixed observations from the desktop support engineers as well.
In addition to ClearPassOnGuard.exe, I'm also seeing ClearPassAgentController.exe and Arubanetsvc.exe (ClearPass VPN service) running on some systems (in the task manager). Are these services required to be turned on all the time? How much memory do these services typically consume? Currently I see these services consuming an average 2-8 MB, 30-50 MB, 1 MB respectively.
Are there any known issues with any of the above-mentioned software co-existing with ClearPass? Are they known of interfere with each other.
Does anyone here seen any similar issues reported anywhere? How can we narrow down this problem? Looking forward to your thoughts and suggestions...
Sorry about the long post :)
01-29-2015 09:10 AM
Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
02-01-2015 11:49 PM
Currently we are checking for 5 items viz.
- checking if AV is installed with the right version, and if real-time protection is on
- checking if Anti-spyware is installed
- checking if personal firewall is installed
- checking if DLP agent service is running
- checking if there are more than one network connection enabled at the same time
Please also note that we were running these checks before we upgraded Onguard and DLP agent versions.
02-03-2015 01:43 AM
i would say contact Aruba support. they probably have a better idea of what normal memory and cpu usage for these process are and what could cause delays.