This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Higher RAM usage by Sophos Endpoint

Hello,

A customer recently brought to our attention that the Sophos Endpoint Defense Software process is consuming higher than normal RAM usage. It seems to be using about 500-600 MB. We are getting reports of poor client experience due to Sophos and are trying to pinpoint the issue.

Any advice is appreciated.

This thread was automatically locked due to age.

Top Replies

Sophos User930 over 1 year ago +2

That is the description of 2 services: SEDService.exe SSPService.exe That Task Manager default view drives me nuts I assume it's SSPService.exe that is the process using the RAM? If so, the baseline…

Parents

0 Sophos User5526 over 1 year ago

We are having the same issue. Mostly with Windows IIS servers. Becomes unavailable. The Sophos Endpoint Defense Software is running close to 500MB and higher when there is slowness. Please advise.
Cancel
Vote Up 0 Vote Down

Cancel
0 Sophos User930 over 1 year ago in reply to Sophos User5526

Can you consider my post and report back?
Cancel
Vote Up +1 Vote Down

Cancel
0 Sophos User5526 over 1 year ago in reply to Sophos User930

I am testing that now. Wil report back.

MDR 2022.1.0.57

Agent 2022.4.2.1

Intercept X 2022.1.3.3
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Sophos User5526 over 1 year ago in reply to Sophos User930

I am testing that now. Wil report back.

MDR 2022.1.0.57

Agent 2022.4.2.1

Intercept X 2022.1.3.3
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Sophos User5526 over 1 year ago in reply to Sophos User5526

so far the memory for SSPS is remaining at ~120 GB
Cancel
Vote Up 0 Vote Down

Cancel
0 Sophos User930 over 1 year ago in reply to Sophos User5526

It might be worth running:

typeperf -si 60 "\Process(SSPService)\Working Set - Private" -o C:\ssp_mem.csv

to get an idea of how it is increasing over time.
Cancel
Vote Up 0 Vote Down

Cancel
0 Sophos User5526 over 1 year ago in reply to Sophos User930

I am running this command for 3 hours on one server to see when it creeps up. It is running high on all windows vm's though. I also opened a ticket with sophos. I will report back the results.
Cancel
Vote Up 0 Vote Down

Cancel