Hi Guys, it’s our first month with Defender, so we...
# _general
v
Hi Guys, it’s our first month with Defender, so we believe that can be defender specific. VDA install takes some incredible amount of time with average disk response time going up to 600 ms + Windows update also takes quite some time. Any tips/guides for taming it ? Exclusion folders/processes etc?
s
Check you have these exclusions in place, no matter what the vendor says about "no impact on performances and fully Citrix compatible": https://community.citrix.com/tech-zone/build/tech-papers/antivirus-best-practices/
👍 1
Check also the impact on logon times. Often you are asked to have best logon time and high security. You can't have both 😄 In our case, we leverage a logon simulator to pinpoint the impact of security softwares. "We can add it, but it would have 15 seconds on logon time. The KPI must be adapted accordingly."
o
I could not have said it better @Steven Lemonier 100% on this.
s
@Steven Lemonier Why is the source of fslogix exclusions parallels? Wonder why Fslogix doesnt come out with that
o
@stormlight Microsoft has published guidance on their learn documentation I think in the "FSlogix for the enterprise' documentation.
s
Interesting. The Microsoft one only applies to scanning the vhdx files. Doesnt touch on the .exe as parallels does. https://learn.microsoft.com/en-us/fslogix/overview-prerequisites?WT.mc_id=AZ-MVP-5004159#configure-antivirus-file-and-folder-exclusions
s
@stormlight first result in google because I recall not finding it from Microsoft's documentation but they added it apparently 😉
l
We use other antivirus/edr vendor, so we uninstall Defender feature because it load server at every new connection.
v
done a first pass of traces review, exception list grown now from like 7 exceptions to about 100. still getting some unexpected activities here or there. Especially it likes to look into windows updates which doesn’t make it any faster and makes it hard to whitelist as it would be too generic.