BitDefender GZ bringing workstation network speeds to a crawl.

[tek9]

I'm having issues with BD causing RAM and CPU spikes on new installs. Basically I'm setting up MSP clients with my new Datto RMM and deploying BDGZ via the RMM. Most of the machines are pretty recent core i5s or i7 and all have 8GB of RAM installed.
Many machines are running with CPU at 85% or higher with only a few programs open, and RAM usage is above 90%.
I even have some systems setup as Windows 10 Kiosks with just Edge allowed for a business center use case. Nothing else running on the machine, and the RAM is at 60%, with no scans running.
I've disabled the Firewall, Hyper Detect, Advanced Anti Exploit and on some machines also disabled the Network Protection as well. Only thing really running is the basic Anti Malware and Advanced Threat Control under On-Execute in the Anti Malware tab. Also ran some tasks to uninstall the unused modules. It didn't help. Still high CPU and RAM, with the BD service the highest in the Task Mgr list.
Is anyone else experiencing this? Should I disable something else?
Thanks.

 

[thecomputerguy]

You may be making a big mistake and I advise you to read this VERY CAREFULLY.

You may be disabling services via policies in BDGZ. By disabling those services all it does is de-activate that service from within the application. You may need to RECONFIGURE the application altogether and remove those services, and not just disable them.

Per this KB from BD you need to reconfigure your clients on a per company scale.

Running tasks

www.bitdefender.com

This KB will reconfigure your endpoints and actually REMOVE the services that may be causing your issue. Disabling them via the policy manager (as I found out) actually does nothing if it contributing to performance issues.

I actually don't care anymore and I disable everything except Anti-Malware, for all existing clients and moving forward any new packages have nothing enabled except Anti-Malware.

I dunno whats up with their stuff but it's broke. But for $1.20 per endpoint per month I'll make it work.

 

[tek9]

You may be making a big mistake and I advise you to read this VERY CAREFULLY.

You may be disabling services via policies in BDGZ. By disabling those services all it does is de-activate that service from within the application. You may need to RECONFIGURE the application altogether and remove those services, and not just disable them.

Per this KB from BD you need to reconfigure your clients on a per company scale.

Running tasks

www.bitdefender.com

This KB will reconfigure your endpoints and actually REMOVE the services that may be causing your issue. Disabling them via the policy manager (as I found out) actually does nothing if it contributing to performance issues.

I actually don't care anymore and I disable everything except Anti-Malware, for all existing clients and moving forward any new packages have nothing enabled except Anti-Malware.

I dunno whats up with their stuff but it's broke. But for $1.20 per endpoint per month I'll make it work.

I did that. I ran it against a group of individual endpoints using the remove function from the reconfigure task. It seems to have worked because when I logged into the endpoints after that I saw that the firewall and other services were not present in the modules window of BD.
I'm wondering if its actually Datto RMM that's the cause of the high CPU/RAM, and not BD.

 

[tek9]

Update: I opened a ticket with Datto support in case it was the RMM causing this. We uninstalled the RMM agent and the RAM was still high so they closed their ticket. I uninstalled BD and the RAM was idling at 40% (of 8GB RAM) with nothing open. So I made some more changes to the BD policy, packages and tasks and now it's only installing the basic AntiMalware module (turned off Advanced Threat Control this time) and the Power User function. I reinstalled the RMM agent and BD and now with nothing open it's idling at 60% RAM. At least the CPU is hovering around 10% or so.
I've been getting complaints this morning from many people that their computers were very slow. These were all machines with spinner HDDs. Restarting helps a little bit.
I'm wondering now if a recent update could have caused this? Perhaps because the RMM agent is pushing the updates now?
Not sure I want to upgrade every machine to an SSD and 16GB of RAM for this.

 

[thecomputerguy]

Anytime I'm working on a computer with a spinner and complaints of performance issues I hard stop on doing anything except upgrading the system with an SSD, then work from there. There is no point in working with, or complaining about spinner drives, they shouldn't even exist at this point but stupid manufacturers still love stuffing 1TB spinner drives into brand new systems, even at a price point where they shouldn't.

Anyone that complains of performance issues with a spinner either gets upgraded to an SSD which will net them at least a 50% performance boost, or I can do diagnostics/"clean" the computer which will net maybe 5% and I charge for every bit of time it takes me longer to do the cleanup because it's a spinner system.

I have zero sympathy for spinner systems. JUST LET THEM DIE.

 

[YeOldeStonecat]

Anytime I'm working on a computer with a spinner and complaints of performance issues I hard stop on doing anything except upgrading the system with an SSD, then work from there. There is no point in working with, or complaining about spinner drives, they shouldn't even exist at this point but stupid manufacturers still love stuffing 1TB spinner drives into brand new systems, even at a price point where they shouldn't.

Anyone that complains of performance issues with a spinner either gets upgraded to an SSD which will net them at least a 50% performance boost, or I can do diagnostics/"clean" the computer which will net maybe 5% and I charge for every bit of time it takes me longer to do the cleanup because it's a spinner system.

I have zero sympathy for spinner systems. JUST LET THEM DIE.

Agree 100%.
They don't want to pay me by the hour to work on a spinner....nor do I want to get stuck in one place for half the day. There's a reason my MSP plans exclude spinners for Win10.