Conflicts between the Behavior Monitoring, Device Control features, and some applications can potentially cause problems that may disrupt the your day-to-day activities. For this reason, Trend Micro recommends a properly managed deployment of Behavior Monitoring and Device Control features.
For a smooth transition to WFBS with Behavior Monitoring and Device Control:
- Set up and deploy a pilot environment that matches the production environment as closely as possible.
The pilot environment is where testers ensure that all applications work as expected in network and security conditions that match the conditions of the production environment.
- Ensure that the following are included in the pilot environment:
- Business applications
- Custom developed applications
- Critical applications used by groups or individuals (such as Payroll, Inventory, Accounting and Database applications)
- Deploy the Client/Server Security Agents into the pilot environment with the features that you intend to enable. For example, the Behavior Monitoring and Device Control features may both be enabled.
- Allow the pilot environment to run for a reasonable amount of time (a "soak time") with the standard applications running and with an average daily use.
- Identify system-intensive applications.
Trend Micro provides a standalone performance tuning tool to help identify applications that could potentially cause a performance impact during deployment. Trend Micro recommends running the TMPerfTool tool, available from Trend Micro Technical Support, on their standard workstation image and/or a few target workstations during the pilot process to determine any potential software or driver conflicts that may cause disruptions during the final deployment of the Behavioral Monitoring and Device Control features.
- Download the TMPerftool from the links below:
- Unzip the downloaded file, and place the TMPerfTool.exe file in the BM folder under the Client Security Agent directory (%ProgramDir%/Trend Micro/BM).
- Double-click TMPerfTool.exe.
- Click Analyze when the system or applications start to slow down.
When a red highlighted row appears, it means that the TMPerfTool found the resource-intensive process.
- Select the highlighted row and click Exclude.
- After excluding the process, verify if the system or application performance improves, then do one of the following:
- If the performance improves, select the process row again and click Include.
- If the performance drops again, it means you found the root cause.
- Note the name of the application.
- Click Stop.
- Click Report and save the .XML file in your specified folder.
- Review the applications that have been identified as conflicting, and add the applications to the Behavior Monitoring Exception List:
- Open the WFBS console.
- Go to Security Settings > Select a group > Configure > Behavior Monitoring.
- Under Exceptions section, add the applications.