Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Maximizing the performance of the Security Agent (SA) of Worry-Free Business Security (WFBS)

    • Updated:
    • 30 Jan 2015
    • Product/Version:
    • Worry-Free Business Security Standard/Advanced 8.0
    • Worry-Free Business Security Standard/Advanced 9.0
    • Platform:
    • Windows 2003 Enterprise
    • Windows 2003 Server R2
    • Windows 2003 Small Business Server
    • Windows 2003 Small Business Server R2
    • Windows 2003 Standard
    • Windows 2008 Enterprise
    • Windows 2008 Essential Business Server
    • Windows 2008 Server R2
    • Windows 2008 Small Business Server
    • Windows 2008 Standard
    • Windows 2011 Small Business Server Essentials
    • Windows 2011 Small Business Server Standard
    • Windows 2012 Enterprise
    • Windows 2012 Web Server Edition
    • Windows 7 32-bit
    • Windows 7 64-bit
    • Windows 8 32-bit
    • Windows 8 64-bit
    • Windows Vista 32-bit
    • Windows Vista 64-bit
    • Windows XP Home
    • Windows XP Professional
    • Windows XP Tablet PC
Summary
Learn how to configure the Security Agent to maximize its performance.
Details
Public
DescriptionProcedure
Disable TSC at startup
Add/change the value to 1 to disable the Damage Cleanup service from executing whenever the Security Agent’s realtime scan starts up. This is helpful for systems with low resource to speed up the bootup/startup time.
  1. Open the ..\PCCSRV\ofcscan.ini file using a text editor such as Notepad.
  2. Under the Global Setting section, add "DisableTSCAtStart=1" parameter to disable the TSC.exe process.
  3. Save and close the file.
  4. Deploy the settings to clients.
  5. Log in to the WFBS console.
  6. Deploy the new configuration to all clients.
  7. Click WFBS Dashboard > Preferences > Domain Global Settings > Desktop/Server.
  8. Click Save.
    The "dtas=dword:00000001" registry is created in the HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-CillinNTCorp\CurrentVersion\Misc of the Security agent.
Delay Real-time Scan service startup
- To speed up boot-up of machines.
  1. Open the Registry Editor (regedit.exe).
    Important: Always back up the whole registry before making any modifications. Incorrect changes to the registry can cause serious system problems.
  2. Go to the HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Real Time Scan Configuration\ hive.
  3.  Change the value of the registry key "NTRtScanInitSleep" to "180000" (DWORD, Decimal).
    Note: The unit is in milliseconds. The value "180000" will delay the start of the Real Time Scan for 3 minutes.
Increase Pagepool
- To maximize pagedpool size.
Notes:
  • This registry key will not work with Windows Vista or Windows Server 2008.
  • This workaround will not work if there is a startup option "/3GB" in the boot.ini file for Windows XP and Windows Server 2003.
  1. Open the Registry Editor.
    Important: Always back up the whole registry before making any modifications. Incorrect changes to the registry can cause serious system problems.
  2. Change the value of "PagedPoolSize" to "0xFFFFFFFF".
  3. Restart the computer.
UADuplicationOptValue =128
- Enable this feature to allow Update Agents to download only one incremental file from the Security server and allow it to automatically generate full pattern and the rest of the incremental files. This will help minimize bandwidth usage.
  1. Open the ..\PCCSRV\ofcscan.ini file using a text editor like Notepad.
  2. Under the Global Setting section, make sure that the entry  "UADuplicationOptValue " is set to “128”
  3. Save and close the file. Deploy the settings to clients
  4. Log on to the WFBS console.
  5. Deploy the new configuration to all clients.
  6. Go to the WFBS Dashboard > Preferences > Domain Global Settings > Desktop/Server.
  7. Click Save.
Command_Handler_Maxium_Thread_Number
-This Security server parameter controls the number of threads responsible for receiving client communications. Default value is 20.
Note: the word Maxium is intentionally misspelled.
  1. Open ..\Program Files\Trend Micro\Security Server\PCCSRV\ofcscan.ini using a text editor like Notepad.
  2. Add the parameter Command_Handler_Maximum_Thread_Number= under [INI_SERVER_SECTION] section, and then set its value to 20 x Number of CPUs.
  3. Restart the Security Server Master Service.
DB_MEM_OPT_MAX
- Increase the server database cache to improve performance.
  1. Open ..\Program Files\Trend Micro\Security Server\PCCSRV\ofcscan.ini using a text editor like Notepad.
  2. Locate the entry "DB_MEM_OPT_MAX = 10240" and set its value to be at least 10% of available memory.
  3. Restart the Security Server Master Service.
VerifyConnectionThreadCount=16
- Verify Connection Thread Count
  1. Open ..\Program Files\Trend Micro\Security Server\PCCSRV\ofcscan.ini using a text editor like Notepad.
  2. Go to the [INI_SERVER_SECTION] section.
  3. Look for the "VerifyConnectionThreadCount=16" parameter.
    This value is dependent on the network capacity. If you have a 100 Mbps intranet, entering a value of 64 or 128 is acceptable.
Preventing HTTPDB crash
  1. Make sure that the HTTPDB folder is not being backed up by any third party backup software, for this may cause the database to be corrupted. Use the database backup feature of WFBS and point the third party software to back up the backup copy instead.
    For the database backup settings, refer to the article: Changing the settings for the database backup of WFBS.
    Note: The weekly database backup during Sundays at 5:00AM is the recommended database backup setting.
  2. Enable Virus Log Deletion.
    1. Open the WFBS console.
    2. Go to Reports > Maintenance.
    3. Go to the Auto Log Deletion tab.
    4. Set Delete Logs Older Than to "14 Days" for all Log Types.
    5. Click Save.
  3. Enlarge the database cache.
    1. Go to the ..\Trend Micro\Security Server\PCCSRV folder.
    2. Open the ofcscan.ini file using a text editor such as Notepad.
    3. Under the [INI_DBFILE_SECTION], look for the "DB_MEM_OPT_MAX" and change the default value "10240(KB)" to 10% of the Security Server's free memory.
    4. Save the changes.
  4. Enlarge the command handler's thread number.
    1. In the ..\Trend Micro\Security Server\PCCSRV\ ofcscan.ini file, look for the [INI_SERVER_SECTION] and add a "Command_Handler_Maxium_Thread_Number" entry.
      Note: The "Command_Handler_Maxium_Thread_Number" entry does not exist by default. Depending on the number of CPUs, set the value of this entry to 20 times the number of the Security Server's CPU.
    2. Save the changes.
  5. Restart the Trend Micro Security Server Master Service.
Premium
Internal
Rating:
Category:
Configure
Solution Id:
1095646
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.