Veeam Server high CPU Cortex XDR

JPrezHidalgo — Wed, 09 Oct 2024 14:24:20 GMT

Hello,

We have a server with Veeam Backup, and we are noticing high CPU usage from Cortex.

We have seen that some exceptions might need to be applied:

https://www.veeam.com/kb1999

Would this apply to Cortex?

Best regards.

Re: Veeam Server high CPU Cortex XDR

jmazzeo — Mon, 21 Oct 2024 14:44:39 GMT

Hi @JPrezHidalgo, thanks for reaching us using the Live Community.

I'll recommend you to create an exclusive Malware profile and an Exceptions profile for this Veeam servers. Then you create an exception for the C:\Program Files\Veeam\* folder for the Local Analysis module which may cause some cpu usage, and check how it goes.

I highly recommend this webinar about Alert Tuning, it goes deeper in the exceptions and exclusions creation: https://live.paloaltonetworks.com/t5/cortex-xdr-webinars/cortex-xdr-customer-success-webinar-series-part-1-alert-tuning/ta-p/584842

We usually don't recommend to create exceptions in front of the XDR agent installation, but in this case you can start with the previous recommendation. If the agent is still causing high CPU usage, I'll recommend you to open a TAC case to go deeper with the troubleshooting.

If this post answers your question, please mark it as the solution.

topic Veeam Server high CPU Cortex XDR in Cortex XDR Discussions

Veeam Server high CPU Cortex XDR

Re: Veeam Server high CPU Cortex XDR