Adobe updates randomly use all bandwidth on firewall for indefinate period of time.

Posted on 2008-11-12
Last Modified: 2013-11-16
Our Checkpoint firewall shows pc's connected to Adobe update services using all bandwidth on firewall and no one else can access the internet with any reasonable speeds.  If we turn off the virus protection on the firewall it is not an issue.  Has anyone had a similar issue and have a solution other than turning off the virus protection on the firewall?
Question by:cinamitton
    LVL 14

    Accepted Solution


    If you could detail your AV setup and whether you are using UTM or an OPSEC 3rd party then we could get a better idea of whats happening.

    If you are using UTM features, I think it is down to the fact that the update files are quite large and therefore hog processing power until the file is finished leaving not enough resources to handle the other normal connections.

    To sort it out in the short term try reducing the "Max file size to scan" setting in the file handling properties to around say 5MB.

    For the longer term, assuming a windows domain, use a group policy to stop the program; a quick google yielded the following:

    On the domain/machine: Disallow the execution of "C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe" in "User Configuration/Windows Settings/Security Settings/Software Restrictions/Additional Rules" by creating a new Path Rule.

    This should stop the updater running at all; for the next rollout you could customise the build to never allow updater (as per and then deploy via group policy.

    Let us know how you get on, HTH

    Author Comment


    Thanks for the quick response.  We are using UTM AV.  I will try adjusting the Max file size and the other suggestions to disable Adobe updater.  Thanks again for the help with setting up Dual ISP redundancy.  It is working great.
    LVL 14

    Expert Comment

    Excellent, glad to hear it!

    The only thing to remember with the max file size is that it will affect your pop, smtp, ftp and http settings so depending on your organisation's needs, it may be best would be to get the group policies rolled out asap. Graphic designers have a nast habit of emailing and ftping 500MB at a time!

    Author Closing Comment

    Thanks again for the information.  Pushed out the registry setting to turn off the updater with group policy.  Appreciate all the help.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Threat Intelligence Starter Resources

    Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

    Suggested Solutions

    Title # Comments Views Activity
    Iptables Centos 6 - Sort Numerically 5 37
    suspending the anti virus 6 87
    Watchguard XTM 2 33
    Wikipedia defines 'Script Kiddies' in this informal way: "In hacker culture, a script kiddie, occasionally script bunny, skiddie, script kitty, script-running juvenile (SRJ), or similar, is a derogatory term used to describe those who use scripts or…
    This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
    how to add IIS SMTP to handle application/Scanner relays into office 365.
    Internet Business Fax to Email Made Easy - With eFax Corporate (, you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now