We recently upgraded to 9.5 SP1 and we are seeing an issue with The trusted files lists in Endpoint Security. Basically Vulscan downloads all of the trusted fiels during vulscan within seconds, but then takes 20-30 minutes to merge the trusted files with an entry in the vulscan log indicating
"Building trusted file list for default location
Merging database 'C:\ProgramData\vulScan\TrustedFileList_HNATLD1SVRLND03_v17570.db' into 'C:\Program Files (x86)\LANDesk\LDClient\Hips\Remote.db.tmp'. Additional rights 0x0"
I am not seeing any increase in IIS traffic on the worker pools, I am not seeing any major resource consumption on the clients, and This happens on new installs as well as upgrades and also happens to clients running 9.5(non-SP1).
I have tried unchecking the setting to send "good reputation" files and this had no noticeable impact.
I have consolditated all of our exisitng trusted files into a trusted list seperate from the learning list so the largest portion of the trusted lists do not change.
I created entirely new EPS settings including Application Control settings, EPS settings, LANDesk Firewall, and trusted files as we had issues with this when upgrading from 9.03 to 9.5.
We DO haev a rather extensive whitelist and our trusted list(nothing is actively learned to this) is 2.25mb, but this is much smaller than the agentbehavior file in 9.0, which was 4-5mb. I am also not really seeing an issue downloading the files, but rather when it is merging into the local db.
We installed the following patches Post SP3 install
LD95-CP-Base-2013-1017
LD95-CP_AEM-2013-0813
LDDA Patch 99
Has anyone seen anything similar?
Thanks
Jim