Sophos XG 125 Huge memory Usage

Question

Hello, I have a sophos XG 125 with last release 18.5.1 configured in HA (active-standby). The memory consumption is always between 85%-92% even after a restart without traffic and load. Yesterday it rebooted after reached 100% of swap usage. I started to encounter this issue of memory usage after the migration from release 17 to 18 few months ago. With release 17 memory has never gone more than 85%. 
 Below, some images with my situation. Snort is consuming the RAM.

Can someone help me to troubleshoot the issue? 
 Thank you, 
 Alessandro

LuCar Toni · Accepted Answer

Is this a old installation? 
 Because i assumed, hyperscan should be enabled by most customers. But not if you use a old backup. 
 Change search_method to hyperscan.

LuCar Toni · Answer

New installations always use hyperscan to optimize the load of the pattern. You can read about it here: https://www.intel.com/content/www/us/en/developer/articles/technical/introduction-to-hyperscan.html 
 But likely it will resolve your issue. You could restart the appliance now to flush the mem and it should be better.

Sophos XG 125 Huge memory Usage

Top Replies