N-Able System Performance Issues

I'd contact support and start threat hunting immediately... There is a megathread here in sysadmin that can get you some help. I'm very glad I'm not an N-able customer today.. https://www.n-able.com/blog/n-central-security-update-august-1-2026

Given the performance hit my immediate thought is something is being done on those servers. Hopefully it's something else!

Are you using sentinel 1 with nable. Are you using AVD antivirus that's bundled in? Solution has historical metrics that you can look up. It'll provide latency on the network. It'll provide CPU and memory usage. I admin N Central. Lots to consider

...

We are currently running N-Central and ninjarmm agents side by side for a migration and have not seen any negative performance. Look into your av exclusions asap as that is a more likely cause than the agents themselves

Wonderful timing.

I don't know why but I’m the IT manager so I am keenly aware of the drop in how reliable and stable my system is. Makes me feel like getting into a troubleshooting scenario is going to be painful.

With only 4 individual ips found it is likely this is a targeted 0day which hopefully won't effect a lot of customers.

Have you ever heard the idiom "correlation does not imply causation" by any chance?

In my experience n-central pushed edr often leaves existing AV scanning too. Also, except for how it handles accessing user device logged in sessions, nable is inferior in just about every way to ninja.

You can safely call BS on this. N-Able telling you that the only thing they know about this is that those IPs were involved in the attacks they've reviewed shouldn't be considered meaningful. It's been confirmed to not be patched in the version number they recommend there.

No personal experience, but did see this https://www.reddit.com/r/sysadmin/comments/1vdo5w2/ncentral_active_exploitation_mitigate_immediately/

Oh boy do I have bad news for you.

I'm assuming youve checked to make sure the nable didn't bundle security services as well?

Errr… you may want to move back to ninja.

It could also be a performance hit due to how they run monitors and jobs, it may be… running a lot of stuff at once in a way that is eating up resources. But yeah… hope you have good endpoint security, hopefully your MSP is competent.

There are two products under the N-Able umbrella, N-Sight and N-Central. Will be helpful to know which one they provided to you. I work more with N-Sight, and it is more than just monitoring. We can bundle in Remote Access, Web Protection, Patch Management, Backups, MDR (Adlumin), and EDR (SentinelOne) among other things. I know the Web Protection service at times can utilize a lot of CPU. SentinelOne on first install also does a full disk scan on top of its normal workload. On some systems, we have had to remove SentinelOne and go back to BitDefender (another software that can be bundled in N-Sight) for performance reasons.

Have you looked at the N-Able processes? (Not sure if Insight or N-Central?) How much memory, CPU, etc are they using? What are they doing? If you disable services, do things return to normal?

Take-Control (the remote desktop tool bundled with N-Central), when an active session is in use, is heavy on the CPU.