EDPA.exe high memory utilization

[Sukumar V]

Hi all,

We have used Symantec Data Loss Prevention 15.1 Version. We noticed that DLP endpoint service EDPA.exe took more than 1GB on Laptop and Desktop. We already excluded the all DLP related folders and services based on the URL https://support.symantec.com/en_US/article.TECH220.... After that also we faced the same issues. Application device control and Local drive also not enabled on the Agent configuration. 

Please help us to resolve the issue.

[Nathan Wilson]

Hi Sukumar,

Is this on all laptops and desktops or only a select few?

 

If this is on a few devices only, I'd uninstall the DPM agent, repackage on Enforce and reinstall using a clean install package,

Hope this helps,

[Sukumar V]

Hi Nathan Wilsom,

 

I have experienced on all Laptops and Desktops. 

[Nathan Wilson]

Hi Sukumar,

 

I can see you've already advised App Device Control etc is turned off which is good we can rule that one out,

 

Do you have any scheduled DAR scans targetted at all machines?  Failing this you can throttle the agent and decrease it's store size to try and streamline their operations,

 

 

As you can see, RAM isn't mentioned as an option but by reducing the agent store size and throttling back network/CPU this may indirectly reduce the RAM usage also,

 

Hope this helps,

[Sukumar V]

Hi Nathan,

Regret the delayed response. I am not performing any DAR Scan on my Environment. And also DAR scan not used. I have checked Agent store size also. It's same what you have shared.

And additionaly i have upgraded the Enforce server and Agents to 15.1. But  after that upgrade also am facing the same issue. Endpoint's are took half of the Memory.

[Tokyo2040]

Hello.

I am experence the same issue whth a testing version of DLP 15.1 in 3 computer, this start to happen with a new image of W10 , aditional when copy files its takking to long....

[Tatsavitur Pareek]

Hello,

I have also experienced the same issue where EDPA.exe using more than 4GB on systems. I am using DLP 15.5 version. I also excluded DLP related folders and services in AV scan filter, also excluded AV related folders and services in DLP agent configuration to ignore.

 

 

[Tokyo2040]

Tatsavitur Pareek,

 

The "solution" for this in my case was disable "Copy to Local Drive" and "Copy to Share" in the Agent Configuration , in your case how is the configuration?

 

 

[Tatsavitur Pareek]

Hello,

Thanks for your email. both Copy to Local Drive" and "Copy to Share" is disabled in the Agent Configuration.

[Tokyo2040]

I going to finish to download the version 15.5 and testing , my test was with the version 15.1

[Ronald Maliza]

Hi!

This issue can be about policy configuration exactly with exeptions on rules, I recomend disabled all policies and enable one by one auntil detect what policy is cause the high memory issue, after that check the exceptions an try to reduce or group them.

[ShadowLeaf]

I agree with Ronald - we had a simialr issue with a client whereby one regular expression rule was causing spikes in the EDPA process for DLP version 15.0 maintenance pack 1 with the agent hotfix (agent bleed).