Preventing performance issues with Worry-Free Business Security in a Citrix or Terminal Server

[Xavier Mustin]

WFBS 8.0 and 9.0
WFBS supports the following:

• Remote Desktop
• Remote Web Workplace
• Citrix server terminal application

In a Terminal Services environment, you can decide whether to show or hide the Security Agent (SA) icon in the Windows task bar. This setting applies to all or none of the active user sessions. It is not possible to apply the setting to individual user sessions. If the icon shows on all active user sessions, memory usage may increase.
To avoid this issue, do the following:

1. On the SA host, open the registry editor.
   Important: Always create a backup before modifying the registry. Incorrect registry changes may cause serious issues. Should this occur, restore it by referring to the "Restoring the Registry" Help topic in Regedit.exe or the "Restoring a Registry Key" Help topic in Regedt32.exe.
2. Create/modify the following REG name/value pair:
   Key:
   For 32-bit: HKLM\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc.
   For 64-bit: HKLM\SOFTWARE\Wow6432Node\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc.
   
   Name: RCS
   Type: DWORD
   Value: 202 (in decimal format)
   Note: There will be no PccNTMon instances created when its value is set to 202.
3. Set the TmPreFilter to run in MiniFilter-Mode:
   1. Look for the HKLM\SYSTEM\CurrentControlSet\Services\TmPreFilter\Parameters registry hive.
   2. Change the value of the "EnableMiniFilter" registry key to "1".
   3. Restart the computer.
4. Change the memory usage of the PagedPool.
   Note: The following steps only works on Windows Server 2003 and below. Skip this step if using Windows Server 2008.
   1. Go to the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management registry hive.
   2. Change the value of the "PagedPoolSize" registry key to "FFFFFFFF".
   3. Restart the computer. Memory management will be set.
5. Exclude the following file extensions from scanning on a Citrix and Terminal Server:
   • .LOG
   • .DAT
   • .TMP
   • .POLB
   • .PF
6. Exclude the roaming profiles from the RealTime scan on the fileserver.
7. Create a daily/weekly scheduled scan of the roaming profiles in off-peak hours on the fileserver.