EFR High CPU on Exchange Server

[SWBW_Florian]

hey there

were using Harmony Endpoint with an Onprem Serverinstance. Especially on our Exchange-Server we can observe a constant CPU usage of ~30% by the Check Point Endpoint EFR Service

I used resmon to observe this behaviour for some time.

through the harmonyserver i deactivated everything but "Anti-Malware Mode". Everything else is OFF or deactivated.

I updated the policy on the client, but still have the EFR service running with 30% CPU

Even the blades arent deactivated as expected at the client, as seen in the screenshot

you can also see the bladesetup at the endpoint server. I cant deactivate the remediation service, dunno how that would be possible

Can you give a hint? How to speed that process down?

thanks in advance

kind regards

florian

[Chris_Atkinson]

Hello Florian, Can you please confirm the server OS and Endpoint client version involved?

Have you been using the server optimization profiles at all? e.g.

https://support.checkpoint.com/results/sk/sk178706

https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Harmony-Endpoint-Admin-Guide/... 

[SWBW_Florian]

hey,

yes of course. Please excuse the lack of the intel.

Its Windows Server 2019 with Exchange 2019. the Clientversion is, light outdated, E87.62

We have setted up the policy as Exchange profile as you can see attached

[Chris_Atkinson · Accepted solution]

sk182570 provides us a performance baseline for EFR.

While E88.70 and above introduce optimisations to improve CPU consumption.

[SWBW_Florian]

im going to update the Client tonight and will come back afterwards

thanks

[SWBW_Florian]

system runs much smoother now.

Thanks