*.ds Files in C:\ProgramData\CheckPoint\DBStore taking too much space

[CP-Shark]

Hello folks,

on a few servers in our environment, we have the issue that the main partition C: is running out of space. We could identify that the reason for that behavior are multiple *.ds files under C:\ProgramData\CheckPoint\DBStore\.

We are running endpoint version E87.31 on all our server with the following blades installed:

There are *.ds files stored from today, but some are more than 8 month old. Where are these files coming from, and how can I delete these file, and why is it happening?

Looking forward to more information and hopefully a solution for that.

Cheers,
Olli

[Chris_Atkinson]

Are you using the server optimization exceptions?

Refer also: sk178706, sk179791

[CP-Shark]

Not on this server and it seems that the SKs are not the right one to my issue.

C:\ProgramData\Checkpoint\DBStore\AmsiScripts\ is fine with just 60 files included (~84KB). The *.ds files are close to 40GB in total.

And related to the 2nd SK it´s not an Exchange server.

[Chris_Atkinson]

Noted. I can see other cases where TAC have worked with customers to clear the space and are monitoring the issue after upgrading to a more recent Endpoint version.

[CP-Shark]

Ok. Solution would be upgrading to a higher version of End Point agent?

[Chris_Atkinson]

It's unclear from the limited sample set I reviewed but TAC would be able to confirm.

In your own case what is the distribution of the files and their sizes, maybe clearing the old files is sufficient but will still need TAC assistance unless you are familiar with temporarily disabling the self protection.

[CP-Shark]

Could you provide more information to "temporarily disabling the self protection"?

[Chris_Atkinson]

The process is available via TAC. 

By default certain product related paths/files are protected from deletion/removal.

[G_W_Albrecht]

1. Use the "PassDialog.exe" file you received from CP TAC
2. Unzip it.
3. Run PassDialog.exe with administrator privileges.
4. Enter Endpoint Security client uninstall password