How many KVOOP.EXE processes should be running on an Endpoint Client machine?
- Article Number: 000005035
- Products: Forcepoint DLP Endpoint, Forcepoint One Endpoint, TRITON AP-ENDPOINT DLP
- Version: 8.7, 8.6, 8.5, 8.4, 8.3, 8.2, 19, 18
- Last Published Date: June 15, 2020
The number of kvoop.exe processes running on my Endpoint client seems to increase and decrease over time. Is there a ceiling on how many processes will spawn?
Starting in DLP version 8.3 builds, the Endpoint will spawn around sixteen (16) kvoop.exe processes. Prior to this, up to 8 processes are used in earlier builds.
Half of these threads are watchdog processes for the remaining instances (1 worker and 1 watchdog). Under normal behavior, the Autonomy system will be recycling one of the instances, resulting in more than 16 processes observed. This is a temporary condition.
If the environment is persistently running a process count significantly above 16, then further investigation is warranted. Please confirm that the proper anti-virus exclusions are in place on the machine as well.
Keywords: KVOOP.exe; PolicyEngine; Extraction of Content received by Endpoint; Sixteen Kvoop.exe process; 1 worker and 1 watchdog; Antivirus Exclusion;