VDAs with Sophos AV Crashing after high CPU

[Daniel Dunn1709158952]

Hi, we have tested Sophos Server Protection on our test machine catalogue for a couple of months which went fine.

 

We have rolled out the image to our Production Machine Catalog, but have found that at least once a day, one of the four machines will crash, and in VMWare we can see the CPU spiked to 100%.

 

I have all of the recommended exclusions in place, but I am unsure how to find out what process is causing the CPU to spike to 100%.

 

When the server crashes it isnt accessible, and we have non persistent machines, so when we power it off and back on it revert back to the master image.

 

How can I investigate what is happening?

 

thanks 

[Jeff Riechers]

Make sure that your software is setup with no scheduled scans since they are non-persistent, and to limit scanning from session to scan on write, not scan on read.  Also make sure that you disable network scanning, have those remote network locations scan themselves.