brandobot 2 Posted April 16, 2018 Share Posted April 16, 2018 We're running ESET Endpoint Security for AV/Firewall,etc.. version 6.5.600.1 and am noticing huge slow downs after installing CarbonBlack Response 6.1.3. the esets_daemon process spikes up to over 100% cpu usage after CarbonBlack is installed. I've tested on both 10.13.4 and 10.12.6. We've had both CarbonBlack and ESET for some time back in 2017 without any issues, but ended up removing CarbonBlack for the past couple months due to the kernel panic issues. Simple tasks such as launching terminal takes 20 seconds or attaching an image to an Outlook e-mail takes a minute and sometimes presents the spinning beach ball. Removing CarbonBlack makes the slowness go away and leaving CarbonBlack and removing ESET also makes the slowness go away. Seems like there's some incompatibility here. Is anyone else running these two products and are experiencing the same issue? Link to comment Share on other sites More sharing options...
Administrators Marcos 5,274 Posted April 17, 2018 Administrators Share Posted April 17, 2018 Isn't CarbonBlack another security software with real-time protection? It is a known fact that having more security solutions at a time, especially if each uses real-time protection, is not recommended. Otherwise they will likely clash, cancelling out each other, make the system unstable, slow, etc. Link to comment Share on other sites More sharing options...
plex 2 Posted April 27, 2018 Share Posted April 27, 2018 We run EES and CbR as well. We usually see this happen with external storage and time machines (usually 100,000's of files, suspect it's trying to scan them all). Also, when an installer is mounted and has adware, EES and CbR will go back and forth touching the same file causing high CPU usage. Seems as though EES goes to scan it so CbR touches it, then EES sees CbR touch it and scans it, etc, etc... We've had 60,000 events get logged in our ERA in an hour due to this. Mostly happens with mounted installers, so just get the user to unmount it. Link to comment Share on other sites More sharing options...
Recommended Posts