I came across interesting issue regarding ATP - as we all know it is another memory leak related one since even latest release notes state it is fixed, we still come across new ones .
So far I could not investigate it deeper (ProcMon and etc.) since it is not constant but random appearances on 10+ servers where it consumes all RAM (16+ GB and raising until a reboot or killing user sessions). After a VMWare Tools update it seems to resolve it for the time being but it needs additional testing and monitoring. I see new ENS 10.6.1 July update is available so in case it appears again I will raise it with McAfee support if it is still affecting production servers.
My question is are you aware of any issues between ATP and VMware tools? I could not find anything besides this article:
Compatibility issues with VMware Tools vShield driver and various McAfee products
I could not update original article so I just want to point out that removing user sessions does not resolve the issue but temporary drops memory usage and it still grows in time.
I will do so but since in most of the case I would work with McAfee employees (members of that community), I would like some additional information first.
It came out that issue still appears after VMWare tools update so I will proceed troubleshooting but my question is still valid:
Is VMWare Tools affecting ATP at all? Are you aware of any issues related to VMWare tools and ENS bundle?
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.
Thousands of customers use our Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:
TrellixSkyhigh Security | Support Trellix.com SkyhighSecurity.com