Windows Update - Server 2016 - Problem DeepGuard and Real-Time-Scanning

Highlighted
Aspirant

Re: Windows Update - Server 2016 - Problem DeepGuard and Real-Time-Scanning

Tried the hotfix on two new deployed machines. One with hotfix, one without.

Server with hotfix is ready installing updates after 32 minutes.

Server without hotfix is still busy after > 99 minutes.

So i think i can safely conclude the hotfix makes a difference. I'll be deploying it asap.

 

One last question, are the exclusions mentioned above still necessary?

F-Secure
F-Secure

Re: Windows Update - Server 2016 - Problem DeepGuard and Real-Time-Scanning

No, they are not needed if you have the hotfix installed.

 

Best regards,

Vad

Scholar

Re: Windows Update - Server 2016 - Problem DeepGuard and Real-Time-Scanning

I have installed the "F-Secure Server Security Premium 12.x FSAV Hotfix"

- The new: "2019-02 Cumulative Update for Windows Server 2016 for x64-based Systems (KB4487006)" still takes hours.

 

It's not fixing our problem.

F-Secure
F-Secure

Re: Windows Update - Server 2016 - Problem DeepGuard and Real-Time-Scanning

Hello SURFsara,

 

Do the exclusions mentioned earlier fix it?

 

Best regards,

Vad

Regular Member

Re: Windows Update - Server 2016 - Problem DeepGuard and Real-Time-Scanning

The new hotfix released by F-Secure on 19 February for Server Security (FSAV952-10) says it fixes the slowness during the Microsoft Patch installation.

 

Well it does!

 

On Windows 2016 servers the difference it makes is remarkable.

 

On some initial testing I did an install of the latest Cumulative update on two identical servers.

One server had the new patch FSAV952-10 installed.

 

  1. Server 1 – FSAV952-10 Patched – Total Install + reboot time = 48 minutes
  2. Server 2 – Not Patched                 - Total Install + reboot time = 4 hours 45 min minutes

 

Still to test on Window 2012 servers, but to be honest we did not experience any issues with extended patching times. All our issues were with Windows 2016 servers.

Regular Member

Re: Windows Update - Server 2016 - Problem DeepGuard and Real-Time-Scanning

Just to add to our experience of the new 19 February patch to fix the slowness during the Microsoft Patching:-

 

The greatly improves installation + reboot times for Windows 2016 servers were achieved WITHOUT the needs for any special directory, file or process exclusions that have been mentioned by other contributors to this post.

RmB
Supporter

Re: Windows Update - Server 2016 - Problem DeepGuard and Real-Time-Scanning

I'd like to inform that same hotfix works also PSB Server Security product as there is same kind of problems with MS patches.

Superuser

Re: Windows Update - Server 2016 - Problem DeepGuard and Real-Time-Scanning

@Vad
when will the hotfix be pushed to SS12 and PSB via updates?

Matthias
----------
perComp is a Platinum Partner of F-Secure since 1994. Any advice or help given by me in this forum is voluntarily and to my best knowledge based on working with the products since 1997. Direct contact for customers please check our homepage http://www.percomp.de

Aspirant

Re: Windows Update - Server 2016 - Problem DeepGuard and Real-Time-Scanning

I would like to know as well. How can we push the hotfix to hundreds of servers?

Aspirant

Re: Windows Update - Server 2016 - Problem DeepGuard and Real-Time-Scanning

Looks like the Hotfix can be pushed out in bulk using "Policy Based Installations".