The large amount of resources consumed might be due to debug logging accidentally enabled or after an upgrade.
To disable debug:
- Stop the Deep Security Manager service.
- Open the logging.properties file under ..\Program Files\Trend Micro\Deep Security Manager\jre\lib\.
- Comment out or place "#" sign in front of all lines after this line: "For example, set the com.xyz.foo logger to only log SEVERE messages".
- Save the changes and close the file.
- Start the Deep Security Manager service.
Another option is to simply replace the existing logging.properties file in your machine with this logging properties file that has debug logging disabled.
If the issue persists, it may be caused by the option Perform ongoing Recommendation Scans set to 'Yes' on the policy. The feature silently scans for the recommendation in the background without showing the status on the Deep Security Manager console. Once a recommendation scan is completed, another scan takes place for another agent.
Also, check that the setting “CPU Usage During Recommendation Scans” is configured to Medium under Administration > System Settings > Advanced. This will help consume CPU usage to up to 50% only.
Click the image to enlarge.
Reference for CPU Usage:
- High = up to 100% of CPU Usage
- Medium = up to 50 % of CPU Usage
- Low = up to 25% of CPU Usage.