McAfee MOVE AntiVirus Performance Advantages

By on Sep 27, 2016

This blog post was written by Teresa Wingfield.

Are you trying to decide if you really need to invest in an antivirus solution optimized for your virtualized environment?  If so, check out the results from our latest performance testing that compares McAfee Management for Optimized Virtual Environments AntiVirus (McAfee MOVE AntiVirus) 4.0 to traditional antivirus software.

McAfee MOVE AntiVirus for virtual desktops and servers is uniquely designed to relieve the overhead of traditional antivirus and provide even better protection.  Our performance tests show that by optimizing and offloading virus scanning, McAfee MOVE AntiVirus enables you to minimize the performance impact on virtual servers and reduce security resources.




Performance Test Results

.DAT storm test

All test clients for traditional antivirus receive .DAT updates in parallel, creating a heavy load on the underlying hypervisor.  McAfee MOVE AntiVirus performs updates on the offload scan server so that they do not negatively impact VMs, resulting in significant advantages over traditional antivirus.

  • 87% less CPU usage.
  • 93% less network usage.
  • 92% less disk usage.

DAT Storm chart

All parameters were recorded at the host level.  McAfee MOVE AntiVirus used one offload scanner with 150 clients.


On-demand scan (ODS) storm with cache test

Due to numerous concurrent scans, host resources with clients running traditional antivirus are severely impacted during an ODS storm.  Clients with McAfee MOVE AntiVirus perform much better because caching avoids repeatedly scanning the same files across clients.  This produced these improvements over traditional antivirus during an ODS storm.

  • 70% less CPU usage.
  • 75% less network usage.
  • 75% less disk usage.



This graphic depicts resource utilization at the host level when simultaneously running ODS on 150 VMs.  All clients have a pre-populated cache.

Enablement of McAfee Threat Intelligence Exchange Test

McAfee Threat Intelligence Exchange is available for multiplatform deployment of McAfee MOVE AntiVirus.  When a McAfee Threat Intelligence Exchange server is configured with McAfee MOVE AntiVirus, fewer files are transferred to the offload scanner, resulting in significant scan avoidance.



This test, which runs an ODS on 70 VMs with McAfee Threat Intelligence Exchange enabled and a pre-populated cache on the offload scan server, shows a 75% reduction in file transfer between client and offload scan server.


McAfee MOVE AntiVirus improves the security of workloads deployed on virtual infrastructure with minimal impact on performance and resource utilization.  For additional information, click here.





About the Author

McAfee Enterprise

McAfee offers industry-leading cybersecurity solutions for all business and enterprise needs. See our blog to stay up-to-date with the latest security trends

Read more posts from McAfee Enterprise

Subscribe to McAfee Securing Tomorrow Blogs