Printing to Canon printers is slower with Endpoint Protection in installed
Article ID: 164911
Updated On:
Products
Issue/Introduction
When you disable Application and Device Control in the Symantec Endpoint Protection (SEP) GUI by clicking on Change Settings > Configure Settings on the Client Management line > untick the option "Enable Application and Device Control" the printing is much faster.
The System Lockdown feature of SEP may have been enabled recently in your environment by adding an MD5 hash to the blacklist policy in Symantec Endpoint Detection and Response (EDR).
Cause
Some processes not reacting well to the hooking of Application and Device Control DLL.
Resolution
- Check with Process Monitor for which process is taking the most CPU utilization during the printing task by checking the stack summary in Tools Stack\Summary.
The Sysfer.dll may be taking up a lot of the CPU.
- Setup an Application control exclusion on the C:\Windows\system32\PrintIsolationHost.exe process to fix the issue
- In some scenarios, setting up an Application control exclusion for %[SYSTEM]%\spoolsv.exe and %[WINDOWS]%\splwow64.exe in the exception policy has fixed the issue as well.
Feedback
