webMethods

webMethods

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Expand all | Collapse all

CheckPoint EndPoint Security on webMethods on-prem servers

  • 1.  CheckPoint EndPoint Security on webMethods on-prem servers

    Posted Thu May 08, 2025 09:43 AM

    Hello. We are using Checkpoint as our EPS platform.  When installing on our on-prem servers, we are experiencing significant delay in our transaction processing time (doubling the time, actually).  Our InfoSec team has pared down the processes to the core/key ones deemed important to the enterprise, but we have not seen any improvement in processing time.  Does anyone have experience with this, or any EPS, and webmethods on prem and seen a way to mitigate this performance degradation?  We are currently on webmethods 10.15



    ------------------------------
    Brian Kumfer
    ------------------------------


  • 2.  RE: CheckPoint EndPoint Security on webMethods on-prem servers

    Posted Thu May 08, 2025 09:56 AM

    Hi Brian,

    you are bringing up a very good question, but we not have enough details for an reasonable answer. 
    Various security tools, may it be a Firewall, Antivirus, Endpoint Protection but also operational tools like backups are known to have side effects on performance.
    When the case would be that processing took 5ms and now take 10ms (double as much) I would assume you where not here to ask. 😁
    It would be good to know what your process does and how the effect looks like exactly. Why?

    The impact can be from various aspects: 
    network latency
    disk IO,
    Memory access, 
    CPU resources,
    semaphored resources access (e.g. when taking a backup, or AV takes a file virus scan).
    Naturally the side effects on a windows system are different than in unix/linux world. 

    In order to investigate it would help to have for example the JDKs "GC.log" enabled and ready to compare the case with and without endpoint protection.
    While testing that also collect system metrics like memory and CPU in order to compare. 

    Simple speaking there should be no such severe side effect. So we need to understand more of the details. 
    For privacy reasons, I would also recommend you raise your question as support case.   see:  http://ibm.com/support 

    Best regards,
    Holm.



    ------------------------------
    Holm Steinland
    webmethods - New Product Introduction
    IBM
    Böblingen
    ------------------------------