Hello,
A customer recently brought to our attention that the Sophos Endpoint Defense Software process is consuming higher than normal RAM usage. It seems to be using about 500-600 MB. We are getting reports of poor client experience due to Sophos and are trying to pinpoint the issue.
Any advice is appreciated.
That is the description of 2 services:
SEDService.exe
SSPService.exe
That Task Manager default view drives me nuts 
I assume it's SSPService.exe that is the process using the RAM?
If so, the baseline RAM depends on the number of cores in the current version?
If you restart the Sophos System Protection service (tamper off) to restart the process, what does it settle at after say, 2 mins? If it's 500MB from the start, then I would attribute it to a large number of cores.
If it starts at say 100MB, there are say, only 4 cores, but after a day or 2 it's at 500MB, I suspect there could be a scheduled scan with archive scanning on or a large zip has been downloaded and scanned with download reputation.
The next release is apparently more efficient in memory usage between SSPService and SophosFileScanner.exe.
Regards
That is the description of 2 services:
SEDService.exe
SSPService.exe
That Task Manager default view drives me nuts
I assume it's SSPService.exe that is the process using the RAM?
If so, the baseline RAM depends on the number of cores in the current version?
If you restart the Sophos System Protection service (tamper off) to restart the process, what does it settle at after say, 2 mins? If it's 500MB from the start, then I would attribute it to a large number of cores.
If it starts at say 100MB, there are say, only 4 cores, but after a day or 2 it's at 500MB, I suspect there could be a scheduled scan with archive scanning on or a large zip has been downloaded and scanned with download reputation.
The next release is apparently more efficient in memory usage between SSPService and SophosFileScanner.exe.
Regards
