FortiEDR 5.2.0.4549 Collector Slowness on Windows 2022 Server

[SteveV967]

We have an ERP system which we have now shown is slowing down due to FortiEDR 5.2.0.4549. We have exceptions in place, but none are working. 

Today in testing putting in the Threat Hunting Exclusion, we found that if we create an Exclusion and apply it to the server we see immediate speed increase, but if we log out of the App (not windows) and back in the speed is slow again. Deleting and Re-creating the Threat Hunting Exclusion (or just creating a new one for the same server), the speed gets fast again. 

We do not see this behavior when creating security event exclusion, only when we update the Threat Hunting and it is only temporary. 

As the subject also mentions it's only occurring in Windows 2022. We have the same ERP system running on 2019 servers and they don't see the slowness.

Any ideas?

[Anthony_E]

Hello Steve,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

[Anthony_E]

Hello steve,

We are still looking for someone to help you.

We will come back to you ASAP.

Regards,

[Anthony_E]

Hi Steve,

According to our expert, we invite you to open a ticket with our TAC team:

https://support.fortinet.com/welcome/#/

They will be able to help you.

Regards,