Recommended Host Sensor Settings for Best Performance

rv@kaufmann.dkrv@kaufmann.dk
in TDR - General Questions

Hi,

I am reading this:
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/services/tdr/tdr_deploy_tips_c.html

Under Recommended Host Sensor Settings for Best Performance Allow Host Sensors to Cache File Metadata and Allow Host Sensors to Cache Process Connection Metadata is set to OFF.

What is the security impact of disabling cashing of those 2 options?
Will detection be slower if off?

Regards
Robert

Comments

  • james.carsonjames.carson Moderator, WatchGuard Representative

    Hi @rv@kaufmann.dk
    disabling these options will cause the host sensor to scan more items that it's already scanned. This can slow the system down as the computer does this, but under most circumstances the users should not experience much of a change unless they are heavily using the CPU/memory on those systems.

    -James Carson
    WatchGuard Customer Support

  • rv@kaufmann.dkrv@kaufmann.dk
    Thank you
Sign In to comment.