Watchguard Endpoint Security agent (Endpoint Security Elite license) causes performance issues
Hi all,
We’re currently deploying the WatchGuard Endpoint Security agent (Endpoint Security Elite license) across multiple customer environments.
For quite some time now, we have been experiencing performance-related issues on several endpoints. These include general system slowness, the inability to open Task Manager, issues with taking screenshots, and in some cases very slow wake-up times.
These problems are occurring across different customers and environments, so it doesn’t appear to be isolated to a single setup.
We also noticed that affected devices are running different protection versions:
- Some are on version 8.00.26.0001
- Others are on 8.00.25.0002
The issue occurs on both versions.
As part of our troubleshooting:
- We tried applying the hotfix related to Advanced Indicators of Attack, but this did not resolve the problem.
We then performed a controlled test with three devices:
- Disabled all settings in the Workstations & Servers profile
- Re-enabled the settings one by one to identify when the issue would return
The performance issues reappeared after enabling the Zero‑Trust Application Service. However, this behavior was not fully consistent — only one out of the three tested devices showed the issue at that point.
Based on this, it seems that the Zero‑Trust Application Service might be involved, but the behavior is inconsistent and difficult to reproduce reliably.
Has anyone experienced similar behavior?
And if so, is there a known fix or recommended configuration to avoid these performance issues?
If additional details, logs, or diagnostics are needed, I’m happy to provide them.
Thanks in advance!
Comments
-
Hi to all,
I have been facing the exact same issue with Endpoint Security 360. Endpoint users started to reporting since 11th of May 2026, mostly affecting endpoints that got upgraded to the latest protection version "8.00.26.0001".User reported performance issue:
-when switching network slow to come up- from Wifi to docking station, and vice versa
-opening web browser slow to load any pages (local systems and public) with any browser (Chrome, EDGE, ...)
-opening PDF slow
-Office desktop apps slow response Outlook, powerpoint, word,..Know fix would be great.
Thank you!0 -
Hi all, we do not have an answer for you here. You will need to create a case for this issue and then we can troubleshoot it. You can also send us a psinfo file from your Endpoint agent. https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Endpoint-Security/troubleshooting/psinfotool/psinfo.html?Highlight=psinfo
0 -
Man, thank you so much for posting this! We've been tearing our hair out since the middle of May with the exact same symptoms on our network, and I hadn't made the connection to the "8.00.26.0001" Endpoint Security 360 update yet. Our users are experiencing that massive lag when swapping from Wi-Fi to their docks too, and the browser/Office slowdown is killing productivity. We don’t have a permanent vendor patch yet either, but as a temporary workaround to keep our team afloat, we've had to roll back a few of the worst-hit machines to the previous stable version, which instantly fixed the network switching and app lag. Knowing this is widespread definitely helps us push the issue up with support—hopefully, they drop a hotfix for this build ASAP! https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Endpoint-Security/troubleshooting/psinfotool/psinfo.html?Highlight=psinfo top games
0 -
We're also seeing this problem on Version:
8.00.26.0001
Did you find a fix?
0 -
Dear @TiagoPM
Please open a case with the support team.
Best would be letting the support team analyse your issue, and provide the best solution/configuration to your problem.
Thanks in advanceDavid Carro | Technical support
WatchGuard Technologies, Inc. | www.watchguard.com0 -
We also have this issue, any updates from the support side?
0 -
Hello, @DanielVieira
I would suggest opening a ticket with support, as we would need to collect data to evaluate the problem and confirm if it is the same issue or not.
David Carro | Technical support
WatchGuard Technologies, Inc. | www.watchguard.com0 -
These findings are quite interesting. The fact that the performance issues returned after enabling the Zero-Trust Application Service suggests that this service may be contributing to the problem, although the behavior is not consistent across all devices. Collecting additional logs and running further controlled tests may help identify the exact cause and determine the best configuration to prevent these performance issues.
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Endpoint-Security/troubleshooting/psinfotool/psinfo.html?Highlight=psinfo fun games
0 -
Analysing logs and data is always the best way to find a solution to an issue.
Sometimes, it might be related to our product being too strict on allowing "side quests" to known programs. Sometimes, there might be no signed files trying to be executed, poorly designed programs allowing elevation of privileges to unwanted processes, or Program and Operating system updates not preserving previous configurations, just because.
Once we have all the data, we provide solutions, adapting our product even to problems not originated by us, and also enhancing our very own performance, thanks to all our customers who provide the required logs.David Carro | Technical support
WatchGuard Technologies, Inc. | www.watchguard.com0 -
Hi Dave, thanks for the response. We’ll open a support case and provide the requested psinfo file from an affected endpoint.
Since multiple customers are reporting similar symptoms, including slow application response and network switching issues, hopefully comparing diagnostics from several affected devices will help identify whether this is related to the protection version or a specific component such as the Zero-Trust Application Service.
It would be useful if anyone else experiencing the issue also opens a case and provides psinfo data, as that may help WatchGuard identify a common pattern more quickly.
I read the instruction, it helps a lot:
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Endpoint-Security/troubleshooting/psinfotool/psinfo.html?Highlight=psinfo wheelie life
0
