rdpudd.dll 10.0.20348.1070 03-Jun-23 KB5027225
rdpudd.dll 10.0.20348.1070 27-Apr-23 KB5026370
rdpudd.dll 10.0.20348.1070 30-Mar-23 KB5025230
rdpudd.dll 10.0.20348.1070 09-Mar-23 KB5023705
rdpudd.dll 10.0.20348.1070 03-Feb-23 KB5022842
rdpudd.dll 10.0.20348.1070 06-Jan-23 KB5022291
rdpudd.dll 10.0.20348.1070 15-Dec-22 KB5022553
rdpudd.dll 10.0.20348.643 01-May-22 KB5013944
rdpudd.dll 10.0.20348.643 21-Apr-22 KB5012637
rdpudd.dll 10.0.20348.643 02-Apr-22 KB5012604
rdpudd.dll 10.0.20348.469 08-Mar-22 KB5011558
rdpudd.dll 10.0.20348.469 02-Mar-22 KB5011497
rdpudd.dll 10.0.20348.469 10-Feb-22 KB5010421
rdpudd.dll 10.0.20348.469 25-Jan-22 KB5010354
rdpudd.dll 10.0.20348.469 19-Jan-22 KB5009608
rdpudd.dll 10.0.20348.469 15-Jan-22 KB5010796
rdpudd.dll 10.0.20348.469 05-Jan-22 KB5009555
rdpudd.dll 10.0.20348.407 03-Jan-22 KB5010197
rdpudd.dll 10.0.20348.405 07-Dec-21 KB5008223
rdpudd.dll 10.0.20348.379 06-Nov-21 KB5007254
rdpudd.dll 10.0.20348.350 02-Nov-21 KB5007205
rdpudd.dll 10.0.20348.320 15-Oct-21 KB5006745
Tag Archives: disconnect
Hidclass.sys – Pre Service Pack 2 Revision History for Windows Server 2008 R2 SP1, Windows 7 SP1 and Windows Small Business Server 2011 (SBS 2011)
Hidclass.sys – Pre Service Pack 2 Revision History for Windows Server 2008 R2 SP1, Windows 7 SP1 and Windows Small Business Server 2011 (SBS 2011)
24-Nov-2011 – 6.1.7601.21866 – Hidclass.sys – x86/x64 – http://support.microsoft.com/kb/2637924 – “0x00000050” Stop error when you disconnect a HID during the system startup process in Windows 7 or in Windows Server 2008 R2
Watchguard XTM Firewall and UTM Appliance – High CPU Usage in the GAV (gateway anti-virus) scand process causes lag and typing delay in Remote Desktop Sessions (RDP) and SIP or VoIP latency issues
Watchguard XTM Firewall and UTM Appliance – High CPU Usage in scand process causes lag and typing delay in Remote Desktop Sessions (RDP). You may find that remote users report a lag with Remote Desktop Sessions, freezing sessions, black screen and random disconnections. At around the same time users report these issues you may find that the CPU usage of the scand process on your Watchguard has increased to 100% and the majority of the activity is attributed to the scand process. You may be able to recreate this issue by browsing websites that utilise lots of Adobe Flash or Media Content as GAV will need to scan all these elements of the web page. Login to the Watchguard System Manager and then open Firebox System Manager click on Status Report and scroll down the report until you find the Process List (Screenshot Below). This information will automatically update every 30 seconds so you can see the %CPU column will change and update every 30 seconds. The top value system shows the overall CPU utilisation and if you look further down you can see which sub processes are actually occupying the CPU time and making up the overall system usage. In the screenshot below we can see that system is showing 100 % CPU Usage and then further down we can see that the scand process is accounting for 90.99% of this. When the CPU Usage reaches 100% on the Watchguard unit it may stop forwarding other traffic and this accounts for the lag and jitter we see within the Remote Desktop Session. Other time sensitive traffic such as VoIP or SIP traffic may also be affected by this issue as the packets are delayed whilst the Firewall recovers from the resource exhaustion. Users may also report that web pages are slow to load at the time these issues occur where the GAV process is still dealing with the other requests.
Resolution/Workaround:
You can try disabling the GAV (gateway antivirus) for the HTTP and FTP Proxy to ensure that this is the actual cause of your issues, if the problem subsides then you may need to consider updating the XTM OS to the latest release i.e. 11.5.2 and/or adjusting the GAV policy so that it does not scan some content i.e. Images/Text within websites. You may also need to consider opening a support case with Watchguard to make them aware of this issue, if you have a large number of users then you may even need to consider upgrading your XTM appliance to a larger unit i.e. XTM 23 to XTM 505 or XTM 22 to XTM330 to provide additional processing power (CPU) and system resources to cope with the additional anti-virus scanning requirements.