Hi Guys, it’s our first month with Defender, so we...
# _generalv
Vadim Gonzalez
07/29/2024, 5:58 AMHi Guys, it’s our first month with Defender, so we believe that can be defender specific.
VDA install takes some incredible amount of time with average disk response time going up to 600 ms +
Windows update also takes quite some time.
Any tips/guides for taming it ? Exclusion folders/processes etc?
s
Steven Lemonier
07/29/2024, 10:12 AMCheck you have these exclusions in place, no matter what the vendor says about "no impact on performances and fully Citrix compatible":
https://community.citrix.com/tech-zone/build/tech-papers/antivirus-best-practices/
👍 1
Steven Lemonier
07/29/2024, 10:12 AMYou have the same list for FSLogix if you use it:https://download.parallels.com/ras/v18/docs/en_US/Parallels-RAS-18-Administrators-Guide/47728.htm
Steven Lemonier
07/29/2024, 10:14 AMCheck also the impact on logon times. Often you are asked to have best logon time and high security. You can't have both 😄
In our case, we leverage a logon simulator to pinpoint the impact of security softwares. "We can add it, but it would have 15 seconds on logon time. The KPI must be adapted accordingly."
o
Oz Zy
07/29/2024, 2:37 PMI could not have said it better @Steven Lemonier 100% on this.
s
stormlight
07/29/2024, 5:33 PM@Steven Lemonier Why is the source of fslogix exclusions parallels? Wonder why Fslogix doesnt come out with that
o
Oz Zy
07/29/2024, 5:48 PM@stormlight Microsoft has published guidance on their learn documentation I think in the "FSlogix for the enterprise' documentation.
s
stormlight
07/29/2024, 6:34 PMInteresting. The Microsoft one only applies to scanning the vhdx files. Doesnt touch on the .exe as parallels does. https://learn.microsoft.com/en-us/fslogix/overview-prerequisites?WT.mc_id=AZ-MVP-5004159#configure-antivirus-file-and-folder-exclusions
s
Steven Lemonier
07/30/2024, 9:34 AM@stormlight first result in google because I recall not finding it from Microsoft's documentation but they added it apparently 😉
l
lstod
07/31/2024, 1:30 PMWe use other antivirus/edr vendor, so we uninstall Defender feature because it load server at every new connection.
v
Vadim Gonzalez
08/01/2024, 6:10 AMdone a first pass of traces review, exception list grown now from like 7 exceptions to about 100. still getting some unexpected activities here or there. Especially it likes to look into windows updates which doesn’t make it any faster and makes it hard to whitelist as it would be too generic.