Veeam Server high CPU Cortex XDR

[J.PrezHidalgo]

Hello,

We have a server with Veeam Backup, and we are noticing high CPU usage from Cortex.

We have seen that some exceptions might need to be applied:

https://www.veeam.com/kb1999

Would this apply to Cortex?

Best regards.

[jmazzeo]

Hi @J.PrezHidalgo, thanks for reaching us using the Live Community.

I'll recommend you to create an exclusive Malware profile and an Exceptions profile for this Veeam servers. Then you create an exception for the C:\Program Files\Veeam\* folder for the Local Analysis module which may cause some cpu usage, and check how it goes.

I highly recommend this webinar about Alert Tuning, it goes deeper in the exceptions and exclusions creation: https://live.paloaltonetworks.com/t5/cortex-xdr-webinars/cortex-xdr-customer-success-webinar-series-...

We usually don't recommend to create exceptions in front of the XDR agent installation, but in this case you can start with the previous recommendation. If the agent is still causing high CPU usage, I'll recommend you to open a TAC case to go deeper with the troubleshooting.

If this post answers your question, please mark it as the solution.