• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1363
  • Last Modified:

Adobe updates randomly use all bandwidth on firewall for indefinate period of time.

Our Checkpoint firewall shows pc's connected to Adobe update services using all bandwidth on firewall and no one else can access the internet with any reasonable speeds.  If we turn off the virus protection on the firewall it is not an issue.  Has anyone had a similar issue and have a solution other than turning off the virus protection on the firewall?
0
cinamitton
Asked:
cinamitton
  • 2
  • 2
1 Solution
 
grimkinCommented:
Hi,

If you could detail your AV setup and whether you are using UTM or an OPSEC 3rd party then we could get a better idea of whats happening.

If you are using UTM features, I think it is down to the fact that the update files are quite large and therefore hog processing power until the file is finished leaving not enough resources to handle the other normal connections.

To sort it out in the short term try reducing the "Max file size to scan" setting in the file handling properties to around say 5MB.

For the longer term, assuming a windows domain, use a group policy to stop the program; a quick google yielded the following:

On the domain/machine: Disallow the execution of "C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe" in "User Configuration/Windows Settings/Security Settings/Software Restrictions/Additional Rules" by creating a new Path Rule.

This should stop the updater running at all; for the next rollout you could customise the build to never allow updater (as per http://blog.stealthpuppy.com/deployment/disable-adobe-updater-with-adobe-customization-wizard-8) and then deploy via group policy.

Let us know how you get on, HTH
0
 
cinamittonAuthor Commented:
Grimkin,

Thanks for the quick response.  We are using UTM AV.  I will try adjusting the Max file size and the other suggestions to disable Adobe updater.  Thanks again for the help with setting up Dual ISP redundancy.  It is working great.
0
 
grimkinCommented:
Excellent, glad to hear it!

The only thing to remember with the max file size is that it will affect your pop, smtp, ftp and http settings so depending on your organisation's needs, it may be best would be to get the group policies rolled out asap. Graphic designers have a nast habit of emailing and ftping 500MB at a time!
0
 
cinamittonAuthor Commented:
Thanks again for the information.  Pushed out the registry setting to turn off the updater with group policy.  Appreciate all the help.
0

Featured Post

Automating Your MSP Business

The road to profitability.
Delivering superior services is key to ensuring customer satisfaction and the consequent long-term relationships that enable MSPs to lock in predictable, recurring revenue. What's the best way to deliver superior service? One word: automation.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now