DLP Policy/Agent Profiler

[hansolo32]

Does anyone know of a tool to analyze your DLP policies/agent settings?  I know of one for VSE (see: McAfee KnowledgeBase - FAQs for McAfee Profiler).

It would be really handy to know if complex rules, policies, settings, dictionaries, etc.could be optimized for better performance.  The DLP processes on the local machine take up way too much CPU cycles and if we could optimize things, that would help lessen the load on a clients system.

[tonyw]

Hi hansolo32,

I also requested via a PER to have such information added into the agent diagnostic tool.  I would suggest doing the same (KB60021).

Outside of that, the agent diagnostic tool is going to show you how the rule is applied to the endpoint but that's about it.  It's a great troubleshooting tool to determine why a machine is acting a certain way but doesn't show or suggest performance factors on the endpoint.

The tool can be found in the DLPe product zip from the download page.  It will be in the tools folder within the zip.

[hansolo32]

I've used the diagnostic tool to help determine whether or not the policy I'm expecting to show up on a machine has actually done so.  Hopefully they will add some improvements to it.  Perhaps I'll submit a PER as well.

- Eric

[JKBH1]

Hey @hansolo32 

Did you get any feedback on your PER?

This would be a good tool to have. I've submitted a MER to support because a developer is complaining that the fcag.exe is consuming his machine's CPU resources.

We couldn't really pinpoint what's causing the fcag.exe to eat much CPU resources. And yes, this fcag.exe have been excluded in the On-access/On-Demand scans. It's frustrating that McAfee at this point couldn't help much when it comes to troubleshooting. 

[hansolo32]

Hmm, that post was from 5 years ago.  Don't remember anything being created per our requests.