topic Re: Problem performance blade forensics in Endpoint

Problem performance blade forensics

lluner — Fri, 03 Oct 2025 17:56:47 GMT

Gentlemen,

I'm receiving complaints about slowness on some machines using the forensic blade, especially I/O, based on the information provided. How can I perform the analysis in this case?

Endpoint version: 88.72.2001

Procedures already performed

1. I ran the diagnostics several times and have already made the exclusions.
2. I created a specific policy for the machine in question, setting the "Tuning" policy.

Re: Problem performance blade forensics

the_rock — Fri, 03 Oct 2025 18:16:24 GMT

Does it happen only on some machines randomly?

Andy

Re: Problem performance blade forensics

lluner — Fri, 03 Oct 2025 19:40:41 GMT

Hi andy

They complain about the machine's slowness and it shows this information, both I/O and the process that is consuming a lot. I believe that the checkpoint could have a thoubleshooting to identify or some configuration regarding this forensic blade that always consumes a lot of I/O, it is worth noting that the disk is NVME

Re: Problem performance blade forensics

dukenukemz — Fri, 03 Oct 2025 20:43:30 GMT

Does the same thing happen on machines with 16GB of ram? it looks like your 8GB of ram is maxed out. On the policy > Behavioral protection > Advanced SEttings > Select Low Memory Mode.

See if that helps

Re: Problem performance blade forensics

the_rock — Fri, 03 Oct 2025 21:02:49 GMT

Hm...since you made all the exceptions, might be worth check with TAC.

Andy

Re: Problem performance blade forensics

Chris_Atkinson — Sat, 04 Oct 2025 00:11:28 GMT

Short of testing E89.00 to see if EPS-59766 is a potential factor here I would suggest engaging with TAC on this.