Linked Clones and Deep Security – Higher CPU on DSVAs Causing Lag?

This post was originally published on this site

We recently deployed a Windows 10 Instant Clone pilot pool to our users, and we’ve gotten a mixed bag of feedback. One specific thing we’ve heard is that the VMs seem slower. We kind of chalked it up to the switch from Windows 7 to Windows 10 just feeling slower because of the nature of the OSes, but, I’m wondering about another thing.


We utilize Deep Security agentless protection from Trend Micro as our anti-malware suite. One thing I found, is on clusters that are the Win 10/Instant Clone deployment, the Deep Security Virtual Appliance CPUs seem to be working considerably harder. I wouldn’t say they’re getting KILLED, but, they definitely are working harder.


Appliance on a Windows 10 Instant Clone Deployment:



Appliance on a Windows 10 Linked Clone Deployment:



The appliances are sized identically. The instant clone DSVA lives on a Dell PowerEdge r740xd vSan Ready Node. The linked clone DSVA lives on an identical r740xd vSan ready node. The LC Win 10 is version 1709 whereas the IC in 1809.


The anti-malware policy assigned to both pools served up is identical. It’s essentially our custom Win 10 policy with exclusions we need for specific apps, as well as best practice exclusions included from here: Antivirus Considerations in a VMware Horizon Environment | VMware


Hoping someone knows of some strange Instant Clone outlier that isn’t listed somewhere, because I’m kind of stumped.


Thanks in advance.

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.