You are not logged in.

Dear visitor, welcome to Palo Community Forum. If this is your first visit here, please read the Help. It explains in detail how this page works. To use all features of this page, you should consider registering. Please use the registration form, to register here or read more information about the registration process. If you are already registered, please login here.

zimmerml

Master

  • "zimmerml" is male
  • "zimmerml" started this thread

Posts: 42

Date of registration: May 10th 2007

Location: Stuttgart

  • Send private message

1

Tuesday, September 18th 2007, 10:36am

Palo and Macaffe (Mcshield)

Hi,
if we use the Macaffe Package we have the problem that the calculation time is huge. Normally we have 5 to 10 sec. With Macaffe its more than 30 sec.
We figured out that mcshield is base of the problem. If we close it manually in the task manager it works. It seems that mcshield is the updater of macaffe so we cant keep it shut down. Everything is set up in the right way. We also changed the ports several times. No difference.
Does anyone know how to solve this problem?
greetz

  • "h_decker" is male

Posts: 763

Date of registration: Oct 26th 2005

Location: Cologne, Germany

  • Send private message

2

Tuesday, September 18th 2007, 10:43am

RE: Palo and Macaffe (Mcshield)

Hi,
did you try to set something like a "scan-exception" for the palo data-directory?

Holger

zimmerml

Master

  • "zimmerml" is male
  • "zimmerml" started this thread

Posts: 42

Date of registration: May 10th 2007

Location: Stuttgart

  • Send private message

3

Tuesday, September 18th 2007, 1:38pm

RE: Palo and Macaffe (Mcshield)

we tried but there is only the possibility all files or software and documents.
Besides that will there be no exception for any files in macafee as a company policy. So no chance to solve the problem like that.

  • "h_decker" is male

Posts: 763

Date of registration: Oct 26th 2005

Location: Cologne, Germany

  • Send private message

4

Tuesday, September 18th 2007, 3:28pm

RE: Palo and Macaffe (Mcshield)

....was just an idea. Has anybody else experience with anti-virus apps and palo?

zimmerml

Master

  • "zimmerml" is male
  • "zimmerml" started this thread

Posts: 42

Date of registration: May 10th 2007

Location: Stuttgart

  • Send private message

5

Tuesday, September 18th 2007, 3:46pm

the idea would be fine ;) and normally it should work

zimmerml

Master

  • "zimmerml" is male
  • "zimmerml" started this thread

Posts: 42

Date of registration: May 10th 2007

Location: Stuttgart

  • Send private message

6

Friday, September 28th 2007, 3:14pm

Scanner

We tried the exceptions in the enterprise version and it is still slow.
Might it be that palo sends csv files instead of data packages?

zimmerml

Master

  • "zimmerml" is male
  • "zimmerml" started this thread

Posts: 42

Date of registration: May 10th 2007

Location: Stuttgart

  • Send private message

7

Friday, September 28th 2007, 4:13pm

RE: Scanner

We tried 2.0 Beta. Calculation in a small tool without Firewall and Palo 2.0 ~1sec, with Firewall and Palo 2.0 ~ 7 Sec. The same with 1.5 was ~2 sec and ~10. Palo 2 is faster thats true. But if we use the huge tool there is still more than 20 sec time to recieve the data.

-> New Version same Problem and I would hope that this problem is solved in the final version but i dont think so.

My opinion is that companies which use mcafee Protection cant use Palo without shutting down their Firewall. And this is a show stopper for palo in that companies.

I know that jedox is working on the new release but it would be nice if we would get some help.

Hugo

Master

Posts: 60

Date of registration: Oct 26th 2005

  • Send private message

8

Friday, September 28th 2007, 4:22pm

RE: Scanner

Run Linux, problem solved :)

zimmerml

Master

  • "zimmerml" is male
  • "zimmerml" started this thread

Posts: 42

Date of registration: May 10th 2007

Location: Stuttgart

  • Send private message

9

Wednesday, October 24th 2007, 12:52pm

RE: Scanner

We solved the problem. But its still strange that there was not a single answer from jedox staff.

  • "h_decker" is male

Posts: 763

Date of registration: Oct 26th 2005

Location: Cologne, Germany

  • Send private message

10

Wednesday, October 24th 2007, 1:13pm

RE: Scanner

Hi,
can you post what the solution was? Maybe its kind of interesting for other forum-users.

Holger

michmac

Master

  • "michmac" is male

Posts: 48

Date of registration: Aug 17th 2006

Location: Philadelphia, US

Occupation: OLAP guy

  • Send private message

11

Wednesday, October 24th 2007, 1:15pm

RE: Scanner

so, how did you solve the issue?

zimmerml

Master

  • "zimmerml" is male
  • "zimmerml" started this thread

Posts: 42

Date of registration: May 10th 2007

Location: Stuttgart

  • Send private message

12

Wednesday, October 24th 2007, 2:06pm

RE: Scanner

It was a part of the real time scanner. If u turn off the buffer over run protection it is solved. But this only works with the mcafee enterprise edition. Users of the private version have to accept the delay of 30 seconds

Rate this thread