Knowledge Base

Support

Deploying Behavior Monitoring in Worry-Free Business Security (WFBS) 6.0

Solution IDLast Updated
1055334Date : 2012/02/2 Time: 5:50 AM (PST)


Product/VersionPlatform
Worry-Free Business Security Standard/Advanced - 6.0
Windows - 2000 Professional, 2000 Small Business Server, 2003 Home Server, 2003 Small Business Server, 2003 Standard Server Edition, 2008 Essential Business Server, 2008 Small Business Server, 7 32-bit, Vista 32-bit, XP Professional

Problem Description

Conflicts between the Behavior Monitoring, Device Control features, and some applications can potentially cause problems which may disrupt the user's day-to-day activities. For this reason, Trend Micro recommends a properly managed deployment of the Behavioral Monitoring and Device Control features.

Solution

For a smooth transition to WFBS with Behavior Monitoring and Device Control, please do the following:

 

1.

Set up and deploy a pilot environment that matches the production environment as closely as possible.

 

 

  Note: The pilot environment is where testers ensure that all applications work as expected in network and security conditions that match the conditions of the production environment.
   

2.

Ensure that the following are included in the pilot environment:

 

 

 

·    

Business applications

 

·    

Custom developed applications

 

·    

Critical applications used by groups or individuals (such as Payroll, Inventory, Accounting and Database applications)

 

 

3.

Deploy the Client/Server Security Agents into the pilot environment with the features that you intend to enable.

 

 

 

Example: The Behavior Monitoring and Device Control features may both be enabled.

 

 

4.

Allow the pilot environment to run for a reasonable amount of time (a "soak time") with the standard applications running and with an average daily use.

 

 

5.

Identify system-intensive applications:

 

 

 

Trend Micro provides a standalone performance tuning tool to help identify applications that could potentially cause a performance impact during deployment. Trend Micro recommends running the TMPerfTool tool, available from Trend Micro Technical Support, on their standard workstation image and/or a few target workstations during the pilot process to determine any potential software or driver conflicts that may cause disruptions during the final deployment of the Behavioral Monitoring and Device Control features.

 

Note: TMPerfTool is for 32-bit platforms only. For 64-bit platforms, tool is still being tested.

 

 

 

a.

Unzip the TMPerfTool_2_90_1131.zip file.

 

 

 

 

b.

Place the TMPerfTool.exe file in the  BM folder under Client Security Agent directory  (%ProgramDir%/Trend Micro/BM) .

 

 

 

 

c.

Double-click TMPerfTool.exe.

 

 

 

 

d.

Click Analyze when the system or applications start to slow down.

 

 

 

 

 

When a red highlighted row appears, it means that the TMPerfTool found the resource-intensive process.

 

 

 

 

e.

Select the highlighted row and click Exclude.

 

 

 

 

f.

After excluding the process, verify if the system or application performance improves, then do one of the following:

 

 

 

 

 

·   

If the performance improves, select the process row again and click Include.

 

 

 

 

 

 

·   

If the performance drops again, it means you found the root cause.

 

 

 

 

g.

Note the name of the application.

 

 

 

 

h.

Click Stop.

 

 

 

 

i.

Click Report and save the .XML file in your specified folder.

 

 

 

 

j.

Review the applications that have been identified as conflicting, and add the applications to the Behavior Monitoring Exception List: 

 

 

 
i. Open the WFBS console.

ii. Go to Security Settings > Select a group > Configure > Behavior Monitoring.

iii. Under Exceptions section, add the applications.

 

 

 

   
   
   
  Related Information: Identifying and resolving performance-related issues caused by the "Behavior Monitoring" and "Device Control" features

 


Rate this Solution
Did this article help you?  
 
Please provide your comments to help us improve this solution.

 
  *This form is an automated system. General questions, technical, sales and product-related issues submitted through this form will not be answered.
 
 

Connect with us on