But AV Running on remote host starts a 50 CPU process on your gateway. And this process exceeds the 100%.
Thanks about the info about the other one though.
Ah I see. I forgot that it tagged the local server with a bit of CPU.
I'm guessing the system only checks the main server for overloading error and not the tagged portion on your side for the AV process.