cancel
Showing results for 
Search instead for 
Did you mean: 

Host Checker takes 30sec to complete

Highlighted
Occasional Contributor

Host Checker takes 30sec to complete

Hello,

We have a host checker policy that verifies if the machine login in has a certificate issued by our internal CA. That process is taking about 30 seconds to complete and the client PC CPU rises up to 100%. If we add AV checking this can go up to 50 seconds.

Is this normal?

Thanks,

Rui Branco

1 REPLY 1
Highlighted
Contributor

Re: Host Checker takes 30sec to complete

Hello,

not really.

We had a similar issus with host checker.

The problem was that our local firewall was not able to check server certificate revocation.

Perhaps your clients are also not able to connect to the CRL of your CA.

If it is not possible to contact the CRL you can disable "Check for server certificate revocation" and "Check for publishers revocation" in internet explorer.