Are you running a current stable or better firmware release?
Anything in Network-Wide/Event log for security appliance?
Anything in Security & SD-WAN/Security Centre/MX Events ?
Try turning IPS and AMP off temporarily.
Have you got any layer 7 firewall rules configured? If so, can you remove them temporarily?
Have you got any content filter rules configured? If so, can you remove them temporarily?