Advanced Protection Issues
Applies To: WatchGuard Advanced EPDR, WatchGuard EPDR, WatchGuard EDR
Advanced Protection tracks the activity of programs on your computer and immediately blocks any malicious programs. For more information, go to Advanced Protection.
When you use Advanced Protection, you might experience one or all of these issues:
- High system resource usage that causes your computer to run slowly.
- An error shows in the Advanced Protection dashboard.
- Compatibility problems with third-party software.
To troubleshoot, you must determine whether the issue is because of the firewall infrastructure that Advanced Protection enables or because of Advanced Protection itself.
Firewall Issues
To see whether the firewall on the computer causes the issue, in the WatchGuard Endpoint Security managment UI, move your computer to a profile where you can disable the Advanced Protection toggle, and enable Firewall > Enable the Firewall. If the issue returns, you can conclude that the firewall settings cause the issue.
If you want to report a firewall issue to Support:
- Use the PSInfo tool to gather support-related information.
- Use the NNS Firewall Diagnostics tool to create a firewall NNSDiag diagnostic log.
Advanced Protection Issues
If the firewall does not cause the issue, Advanced Protection might be the cause. If you want to report an Advanced Protection issue to Support:
- Use the PSInfo tool to gather support-related information.
- Use the PSerrortrace tool to generate a diagnostic file.
Before you report a case to Support:
- Disable the Anti-Exploit toggle, and enable the Advanced Protection toggle. If the issue persists, contact Support.
In Aether 16 and higher, the Anti-Exploit toggle is named Code Injection.
- Determine whether the issue is related to a third-party application. If a runtime error occurs or the computer slows when you run the application, try to exclude the application process. If the issue persists, contact Support.
End an application process to exclude it. In Windows, you can use Task Manager > Processes to end a process.