McAfee MOVE AntiVirus Performance Advantages

Are you trying to decide if you really need to invest in an antivirus solution optimized for your virtualized environment?  If so, check out the results from our latest performance testing that compares McAfee Management for Optimized Virtual Environments AntiVirus (McAfee MOVE AntiVirus) 4.0 to traditional antivirus software.

McAfee MOVE AntiVirus for virtual desktops and servers is uniquely designed to relieve the overhead of traditional antivirus and provide even better protection.  Our performance tests show that by optimizing and offloading virus scanning, McAfee MOVE AntiVirus enables you to minimize the performance impact on virtual servers and reduce security resources.

 

911_0816_table2

 

Performance Test Results

.DAT storm test

All test clients for traditional antivirus receive .DAT updates in parallel, creating a heavy load on the underlying hypervisor.  McAfee MOVE AntiVirus performs updates on the offload scan server so that they do not negatively impact VMs, resulting in significant advantages over traditional antivirus.

  • 87% less CPU usage.
  • 93% less network usage.
  • 92% less disk usage.

DAT Storm chart

All parameters were recorded at the host level.  McAfee MOVE AntiVirus used one offload scanner with 150 clients.

 

On-demand scan (ODS) storm with cache test

Due to numerous concurrent scans, host resources with clients running traditional antivirus are severely impacted during an ODS storm.  Clients with McAfee MOVE AntiVirus perform much better because caching avoids repeatedly scanning the same files across clients.  This produced these improvements over traditional antivirus during an ODS storm.

  • 70% less CPU usage.
  • 75% less network usage.
  • 75% less disk usage.

 

ods-storm-chart

This graphic depicts resource utilization at the host level when simultaneously running ODS on 150 VMs.  All clients have a pre-populated cache.

Enablement of McAfee Threat Intelligence Exchange Test

McAfee Threat Intelligence Exchange is available for multiplatform deployment of McAfee MOVE AntiVirus.  When a McAfee Threat Intelligence Exchange server is configured with McAfee MOVE AntiVirus, fewer files are transferred to the offload scanner, resulting in significant scan avoidance.

 

offload-scanner-chart

This test, which runs an ODS on 70 VMs with McAfee Threat Intelligence Exchange enabled and a pre-populated cache on the offload scan server, shows a 75% reduction in file transfer between client and offload scan server.

Summary

McAfee MOVE AntiVirus improves the security of workloads deployed on virtual infrastructure with minimal impact on performance and resource utilization.  For additional information, click here.