1

Often I hear concerns of “slow performance” or other miscellaneous issues when using Kaspersky Endpoint Security 10 and Kaspersky Security Center 10. Due to this, I am posting a document that explains the best practices when using this software so that you can get the best value out of it and better performance.

With this, you’ll be able to tweak the way you scan for viruses, organize your computers, make your network agents and endpoint security perform better, and more.

If you have further questions or need tips, please post on the Kaspersky forum and we’ll point you in the right direction.

Security_Center_10_and_Endpoint_Security_10_Best_Practices_Final.pdf (656 KB)

15 Spice ups
2

I just set it up according to your settings, I will post back and let you know how it goes. I have gotten a few complaints in the past about some slowness due to Kaspersky and it was not setup properly. Let’s see how this fairs.

Thanks for the guide!

1 Spice up
3

Hello tmontoya,

Thanks for choosing Kaspersky. I know it has served the company I work for very well. While it can be resource intensive due to it’s many available options, this guide I have posted may be necessary. To me, I’d rather have more options and have to turn some off because should we upgrade our equipment in the future and/or have a need to the advanced options, I won’t have to look elsewhere for a newer solution.

Let us know how it goes by posting a new question and we’ll assist in any way we can.

4

It made things better, however it still seems like a lot of users are getting a considerable slowdown while in Outlook and opening attachments and such.

5

Regarding your Mail Antivirus settings, do you have “Additional: The Bat! plug-in” disabled?

I would also disable “System Watcher”, has that has been known to really bog down devices that do not have the resources to handle it. After you do so, please go to your Computers list, select all Client computers, right-click and select “All tasks” and click “Force Synchronization”.

That should help with your performance greatly. I recommend disabling any other sections you know you won’t be using, such as IM Antivirus if you don’t use any in-house or third party Instant Messaging software, for example.

1 Spice up
6

Thanks for the quick reply! I do not have The Bat! plugin enabled.

Some of the PCs are rather old so I will disable System Watcher and the other ones you suggested. I will make the changes and post back here with the results.

7

Sounds good. In our environment, most of our devices are running 4GB of RAM and 2.66 - 3.x GHz processors, so they are pretty comfortable after the tweaks. It all depends on what you need and adjusting Kaspersky options / device hardware accordingly.

8

It still seems to be eating away at the computers, logins can take up to 5 minutes. AVP.exe tends to take 50%+ in process monitor.

9

I just want to confirm; you do have all the recommendations in the “Best Practices” set up and tweaked at this time? Especially after disabling System Watcher, Vulnerability Scanning, and enabling “Conceed resources to other applications”, you should be in good shape.

May I ask what are the technical specifics you have within some of these problematic systems?

10

Yes they are all disabled and I am running the best practices according to your guide.

Most PCs are a Core2Duo with 4GB of ram running on Windows 7.

11

At this point, I would contact your Kaspersky Account Manager / Channel Sales Rep to get in touch with support and see if they can review your system(s) because there might be something unique to your environment affecting your resources.

You may also refer to the Support Links I have pinned to this forum that will point you toward the support phone number or chat.

I apologize for not being able to help more.

12

Hello, am having KSC 10 with about 600 clients I need to know how many tasks should I make for updates and what is the time interval for the the task , is there a best practice guide for the updates ?? your help is much appreciated.

13

Thanks for this guide and sharing your knowledge.

I set up Kaspersky Security Center and Kaspersky endpoints okay but they did a bit of configuration to run optimally. This guide has some good information in it and helped me fine tune the policy and task settings.

Cheers.

14

Thank you thank you thank you. That showed me a few things I’d missed when I upgraded to KESC 10.

15

Unfortunately I have to disagree with iTrick on one thing. Disabling System Watcher is definitely not recommended and goes against Kaspersky’s best practice recommendations. This includes a component called “Automatic Exploit Prevention” which is a key component from a security point of view.

Regarding the slow performance in Outlook, ‘The Bat’ plugin will make no difference. You can disable the MS Outlook plugin. This is the main cause of performance issues with Outlook. There is no concern from a security point of view as KES scans all the mail protocols the same way. The only hole that it leaves protection wise is internal traffic within your organisation.

Hope this helps

2 Spice ups
16

Daniel - I find that interesting because that “Best Practice” came from a Kaspersky Channel System Engineer back when I recommended it and was a frequent topic because it was known to bog down many systems for your clients.

17

It’s shame that when we buy a product to get the best protection and then best practices is to turn almost all features off

2 Spice ups
18

Kaspersky offers a Remote Health Check for $500, money well spent in my eyes. They also have a few other offerings to help get it installed and configured correctly.

19

Has there been any update to this thread or problem. The slides used above are not up to date and no longer apply but the KES10 is still bogging down the PC’s I put it on in the network

20

Simple… use Webroot…