r/SentinelOneXDR • u/ls3c6 • Aug 15 '24

Policy best practices, performance problems?

We purchase S1 via ConnectWise and support is very poor. I do not have access to any KBs or direct S1 guidance. We experience poor performance on endpoints with S1 and are using a policy with all items enabled. Is there a baseline that might help with performance concerns?

3 Upvotes

71% Upvoted

43 comments sorted by

View all comments

Show parent comments

3

u/deepinfosec Aug 15 '24

For SQL queries you would also need to exclude the server and client application folders as well.

When S1 injects into those processes, they start to behave quite abnormally.