WFBS supports the following:

• Remote Desktop
• Remote Web Workplace
• Citrix server terminal application

In a Terminal Services environment, you can decide whether to show or hide the Security Agent (SA) icon in the Windows task bar. This setting applies to all or none of the active user sessions. It is not possible to apply the setting to individual user sessions. If the icon shows on all active user sessions, memory usage may increase.

To avoid this issue, do the following:

1. Unload the Security Agent.
2. On the SA host, open the registry editor.
    

   Always create a backup before modifying the registry. Incorrect registry changes may cause serious issues. Should this occur, restore it by referring to the "Restoring the Registry" Help topic in Regedit.exe or the "Restoring a Registry Key" Help topic in Regedt32.exe.

    
3. Create/modify the following REG name/value pair:

   Key: HKLM\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc (for 32-bit)
   HKLM\SOFTWARE\Wow6432Node\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc (for 64-bit)
   Name: RCS
   Type: DWORD
   Value: 202 (in decimal format)

    

   There will be no PccNTMon instances created when its value is set to 202. This setting will hide the Security Agent console icon from the system tray.

    

4. Set the TmPreFilter to run in MiniFilter-Mode:

   1. Look for the HKLM\SYSTEM\CurrentControlSet\Services\TmPreFilter\Parameters registry hive.
   2. Change the value of the "EnableMiniFilter" registry key to "1".
   3. Restart the computer.
5. Change the memory usage of the PagedPool.
    

   The following steps only works on Windows Server 2003 and below. Skip this step if using Windows Server 2008.

   1. Go to the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management registry hive.
   2. Change the value of the "PagedPoolSize" registry key to "FFFFFFFF".
   3. Restart the computer. Memory management will be set.

    
6. Exclude the following file extensions from scanning on a Citrix and Terminal Server:
   • .LOG
   • .DAT
   • .TMP
   • .POL
   • .PF
7. Exclude the roaming profiles from the RealTime scan on the fileserver.
8. Create a daily/weekly scheduled scan of the roaming profiles in off-peak hours on the fileserver.

Many instances of the PccNTMon process will be created in the memory where the agent is installed. This happens when users access the computer from a terminal session.

To avoid this issue, do the following:

1. Unload the agent.
2. Open the Registry Editor (regedit).
    

   Always create a backup before modifying the registry. Incorrect registry changes may cause serious issues. Should this occur, restore it by referring to the "Restoring the Registry" Help topic in Regedit.exe or the "Restoring a Registry Key" Help topic in Regedt32.exe.

    
3. Look for this registry hive:

   For 32-bit: HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc.
   For 64-bit: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc.

4. Change the value of the registry key "RCS" (REG_DWORD) to decimal "202". The default value is "101".
5. Go to C:\Program Files (x86)\Trend Micro\Client Server Security Agent\HostedAgent\CPM\CpmConfig.ini.
6. Edit the CpmConfig.ini file. Find RCS under section [INI_CRITICAL_SECTION], and change its value to "1".
    

   There will be no PccNTMon instances created when its value is set to 202. This setting will hide the Security Agent icon console from the system tray.

    
7. Set the TmPreFilter to run in MiniFilter-Mode:
   1. Look for the HKLM\SYSTEM\CurrentControlSet\Services\TmPreFilter\Parameters registry hive.
   2. Change the value of the "EnableMiniFilter" registry key to "1".
   3. Reload the agent to apply the changes made in the CpmConfig.ini file.
   4. Restart the computer.
8. Change the memory usage of the PagedPool.
    

   The following steps only work on Windows Server 2003 and below. Skip this step if using Windows Server 2008.

    
   1. Go to the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management registry hive.
   2. Change the value of the "PagedPoolSize" registry key to "FFFFFFFF".
   3. Restart the computer. Memory management will be set.
9. Exclude the following file extensions from scanning on a Citrix and Terminal Server:
   • .LOG
   • .DAT
   • .TMP
   • .POL
   • .PF
10. Exclude the roaming profiles from the RealTime scan on the fileserver.
11. Create a daily/weekly scheduled scan of the roaming profiles in off-peak hours on the fileserver.

Issue: Slow login with blank screen

Solution: Modify the agent registry keys to allow a delay on the startup procedure of the agent until the system has launched successfully and to avoids deadlock situations during login

For steps, refer to this Knowledgebase article:
Slow login on Citrix environment after installing WFBS/OSCE/Apex One